Ethereal-dev: Re: [Ethereal-dev] Checking out Sniffer ...

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Tue, 5 Mar 2002 14:39:19 -0800
On Tue, Mar 05, 2002 at 10:03:23PM +1100, Ronnie Sahlberg wrote:
> My memories from trying filtering in netmon was something really crude as
> say filtering for NFS filenames that I would have to do something as easy to
> use as frame[25:30]=="FooBar"

The NFS dissector in Netmon appears to be stupid - they appear to have
registered the file name field as a one-byte field, rather than as a
string or a byte array.

The underlying mechanism for comparing fields with values *is* present
in the Netmon core; the NFS dissector sucks, however.