altri filtri
ip[6:2] & 0x2000 != 0
ip[6:2] & 0x1fff > 0
ip and ip[12:4] = ip[16:4]
ip and ip[19] = 0xff
icmp[0] != 8 and icmp[0] != 0
tcp and (tcp[13] & 3 != 0)
tcp and (tcp[13] & 3 = 3)