Wireshark mailing list archives
Using regular expression match as custom column
From: William <wnatter () gmail com>
Date: Mon, 12 Dec 2011 13:17:19 -0500
Hello,
With Wireshark, I can't seem to be able to do either of these:
1. Export to file the exact contents of the columns that are displayed and
nothing more
2. Create a custom column that contains the results of a matched regular
expression, e.g.:
tcp.data starts with "HEAD /reports/packages/rg.wsh?notification_who=
noc () isp net¬ification_cc="
Regular expression of interest in this case: "notification_who=([^&]+)&"
This would display the following data: noc () isp net
I actually have other information to display, but the mechanism I'm asking
about would be very powerful, and I have seen nothing about it or anything
similar in your wiki.
Sincerely,
William
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Using regular expression match as custom column William (Dec 13)
- Re: Using regular expression match as custom column Chris Maynard (Dec 13)
