Ethereal-users: Re: [Ethereal-users] Text search/etc

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Martin Regner" <martin.regner@xxxxxxxxx>
Date: Wed, 26 Mar 2003 22:55:39 +0100
Ian Schorr wrote:
<Is it possible for me to build a filter/search on a particular string
<that may occur anywhere inside the packet view or tree view?  

The thing I do is to print to a file from Ethereal (File/Print... Format (x) Plain Text, Print to  (x) File,  (x) Print detail) and do the search in a text editor or similar, or use tethereal with "-x" flag to generate the text output.
http://www.ethereal.com/lists/ethereal-users/200303/msg00264.html

There is also a program called ngrep that could be useful in certain cases, I think. 
I haven't used it so much myself. It's a grep program for libpcap files.
http://www.packetfactory.net/projects/ngrep/

<ngrep -t -i -I infile.pcap "searchforthistext" tcp port 80