Wireshark mailing list archives
Re: Is there a way to easily go to the next packet that satisfies a filter string without filtering the packets
From: Guy Harris <gharris () sonic net>
Date: Sat, 20 Mar 2021 14:28:04 -0700
On Mar 20, 2021, at 2:23 PM, ronnie sahlberg <ronniesahlberg () gmail com> wrote:
Doesn't wireshark already have this? CTRL-F and then type in the filter string then click "Find" and it will cycle through the packets that are matching.
Yes, "Find" (Ctrl-F on Windows and UN*Xes not named "macOS", Command+F on macOS) can search based on:
a pattern-matching expression ("Find" calls it a "Display Filter");
a hex value;
a string;
a regular expression.
The latter three match on raw frame contents; the former is the same as display filters, read filters, coloring rule
expressions, etc..
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives: https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Is there a way to easily go to the next packet that satisfies a filter string without filtering the packets Richard Sharpe (Mar 20)
- Re: Is there a way to easily go to the next packet that satisfies a filter string without filtering the packets ronnie sahlberg (Mar 20)
- Re: Is there a way to easily go to the next packet that satisfies a filter string without filtering the packets Guy Harris (Mar 20)
- Re: Is there a way to easily go to the next packet that satisfies a filter string without filtering the packets chuck c (Mar 20)
- Re: Is there a way to easily go to the next packet that satisfies a filter string without filtering the packets ronnie sahlberg (Mar 20)
