Ethereal-dev: Re: [ethereal-dev] Filtering on fields in display filters

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Tue, 25 Jul 2000 20:50:25 -0700
On Wed, Jul 26, 2000 at 01:40:45PM +0900, Richard Sharpe wrote:
> Can we filter on all fields that a dissector places in the tree view, or
> only those fields that are in the filter table that the dissector makes
> available?

Ethereal can filter on any field put into the tree by a call that takes
one of the "hf_XXX" values filled in by the
"proto_register_field_array()", e.g. "proto_tree_add_item()",
"proto_tree_add_uint()", "proto_tree_add_boolean()"...

...*IF* the field is of a type that is supported by the
display-filtering engine; currently, strings are not supported, so you
can't filter on something added with "proto_tree_add_string()" - or with
"proto_tree_add_item()", if it's an FT_STRING field.

"proto_tree_add_text()" is *not* such a call, so Ethereal cannot filter
on any field put into the tree with "proto_tree_add_text()".

So the set of fields on which you can filter is a subset of the set of
fields listed in the man page (string fields would be listed there, but
aren't yet filterable).