How to filter by binary content?

RouterOS General
1

Hello!

What to write into content field in a filter rule properties in case if I want to filter packets that contains two bytes 0xFCA5?

2

Am I only one who needs to use filter rule by non text content???

3

try content=“\FC\A5”

4

I see in wireshark “fc a5 81 05”
but rule
chain=forward action=log protocol=udp src-address-list=DNS_servers out-interface=WAN src-port=53 content=\FC\A5 log-prefix=“”
does not hit… why?


full captured packet follows

000400010006000f1f69b4c60000080045000040643f00004011cbb55c3e634fb221d9090035c6c6002c4af6fca58105000100000000000103697363036f72670000ff00010000291000000080000000

I can’t catch in in mikrotik :frowning: