Hi,
I'm playing a little with wireshark internals and I found that it's
possible to make filters like:
tcp.stream == ${tcp.stream} <-- filter current selected stream
ip.addr == ${ip.src} <-- find packets containing source address.
It's quite nice feature, but I couldn't find any documentation for it ;/
I only found general information about macros:
http://www.wireshark.org/docs/wsug_html_chunked/ChDisplayFilterMacrosSection.html
http://wiki.wireshark.org/DFilterMacro
and proposal of this feature:
http://www.wireshark.org/lists/wireshark-dev/200707/msg00314.html
any links?