Wireshark · Wireshark-users: Re: [Wireshark-users] Display Filter for text string in TCP payload

Wireshark-users: Re: [Wireshark-users] Display Filter for text string in TCP payload

From: Hansang Bae <hbae@xxxxxxxxxx>

Date: Wed, 09 Apr 2008 22:06:09 -0400

Guy Harris wrote:

As far as I know, we don't have a case-insensitive version of the"contains" operator.
Perhaps your mail is an indication that we should.

That would be great. I wonder if "tcp contains..." can span multiplepackets? I haven't tried it. So if packet 100 has PA and packet 101has SS, will tcp contains PASS find it?



--

Thanks,
Hansang

References:
- [Wireshark-users] Display Filter for text string in TCP payload
  - From: Feeny, Michael (GWM-CAI)
- Re: [Wireshark-users] Display Filter for text string in TCP payload
  - From: Luis EG Ontanon
- Re: [Wireshark-users] Display Filter for text string in TCP payload
  - From: Sake Blok
- Re: [Wireshark-users] Display Filter for text string in TCP payload
  - From: Feeny, Michael (GWM-CAI)
- Re: [Wireshark-users] Display Filter for text string in TCP payload
  - From: Guy Harris

Prev by Date: Re: [Wireshark-users] end-to-end delay calculation using tcp
Next by Date: Re: [Wireshark-users] Looking for some help or advice with an issue
Previous by thread: Re: [Wireshark-users] Display Filter for text string in TCP payload
Next by thread: [Wireshark-users] Display Filter for Physical address of a Wireless adapter?
Index(es):
- Date
- Thread