On Mar 20, 2021, at 2:23 PM, ronnie sahlberg <ronniesahlberg@xxxxxxxxx> wrote:
> Doesn't wireshark already have this?
>
> CTRL-F and then type in the filter string
> then click "Find" and it will cycle through the packets that are matching.
Yes, "Find" (Ctrl-F on Windows and UN*Xes not named "macOS", Command+F on macOS) can search based on:
a pattern-matching expression ("Find" calls it a "Display Filter");
a hex value;
a string;
a regular expression.
The latter three match on raw frame contents; the former is the same as display filters, read filters, coloring rule expressions, etc..