Ethereal-dev: Re: [Ethereal-dev] Re: rev 14518: /trunk/epan/dissectors/: packet-ip.c

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gilbertr@xxxxxxxxx>
Date: Fri, 3 Jun 2005 15:46:40 -0500
We do want to do the same, and the infrastructure allows for it ---
the display filter "virtual machine" can compare lists of fields and
lists of values, it just has to be done.

--gilbert

On 6/2/05, Guy Harris <gharris@xxxxxxxxx> wrote:
> ronnie sahlberg wrote:
> 
> > These resolved hostnames, would it make sense to make
> > ip.src and ip.dst into expansions and put the resolved name ip.host
> > down there so they become visible?
> 
> Presumably the intent is to allow
> 
>         ip.host contains "google"
> 
> or something such as that?  (Exact matches on the host can be done with
> 
>         ip.addr eq www.google.com
> 
> Speaking of which, libpcap capture filters will, if a host name has more
> than one IP address corresponding to it, match any of the addresses; we
> might want to do the same with display filters.)
> 
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
> 
>