title: Can a wireshark capture filter scan for two different patterns?
body: <p>I need a capture filter that looks for a 4-byte machine ID that can occur in several places in the UDP payload.  Specifically,</p>
  
  <pre><code>udp[18:4]==0x76123AA6 or udp[20:4]==0x76123AA6 or udp[25:4]==0x76123AA6
  </code></pre>
  
  <p>Experimenting with pieces of this filter does locate some desired packets, but if I use the above filter, some packets are not passed through the filter as expected. </p>
  
  <p>Do the no-loop rules of the BPF interpreter prevent this kind of multiple-match filtering?</p>