Ethereal-users: Re: [Ethereal-users] Display filter question!!

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>
Date: Thu, 22 May 2003 22:21:18 +1000
Currently it is not possible.

It would be possible if
* SSL dissector was changed to place hf filterable items for the SSL trees
such as the SSLv3RecordLayer tree, which would be easy to do
and
* someone enhanced the filter languange to add a COUNT() operation so that a
display filter such as
COUNT(ssl.record_layer)>1 could be used  which would be hard to do.


A COUNT(<hf_index>) operation added to the display filter language would be
useful.



----- Original Message -----
From: Mathias Bj�rkander TACMa
To: 'ethereal-users@xxxxxxxxxxxx'
Sent: Thursday, May 22, 2003 6:18 PM
Subject: [Ethereal-users] Display filter question!!



Hi All.

Is there any way of setting up a display filter and/or a capture filter that
trigs at SSL packages that includes more then one Record Layer (Se attached
screen dump of Ethereal)?