Ethereal-users: Re: [Ethereal-users] Filtering and manipulating the info field after packet capt

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 15 Dec 2003 02:45:07 -0800
On Sat, Dec 13, 2003 at 12:48:05PM -0800, Scott McIntyre wrote:
> I've seen many posts on Ethereal-users as well as
> other exchanges across the net regarding filtering
> data in the info field after capturing data packets
> with Ethereal, so here is one solution that works:

Perhaps Ethereal should support, for display filtering, the same options
for checking the displayed text as are supported for "Find Packet",
namely searching in the decoded packet or packet summary.

That'd involve either a UI change or a display filter syntax, as
currently the only way to do display filtering is through a display
filter expression.  Adding new display filter operators for searching
in the decoded packet and the packet summary would let you use that in
Tethereal as well.