On Mon, Sep 11, 2000 at 06:27:15PM -0700, Gary Taylor wrote:
>
> Hi again,
>
> Now that I've got the display filters working I've seen just how useful this
> program is.
>
> In working with the find filter, is it possible to search for text. The man
> page indicates that each protocol field is typed. Not sure what that means.
> What I'm trying to do is search using the Edit>Find Frame feature. I'd like to
> be able to search all the packets for something that is in the data field. For
> example if I wanted to search for ff fd 28. Or the word whatever in the ascii
> field to the right.
Unfortunately Ethereal doesn't have that capability yet. It is in
my plans, though.
> I've tried putting various combinations in the find filter and if I put plain
> hex in there I get the unable to parse message. If I prepend it with the word
> text eq it gives me an error and closes Ethereal.
Although filtering on "text" won't work like you want it to, Ethereal
should not simply die when "text eq ..." is used. That's behavior (dying)
is a bug, so I'll look into that.
--gilbert