Is this purchance related to the fact that when I attempt to
filter based upon a subselection of a tag (like 'mgcp.endpoint[0:3] ==
"eaw" ') I get a parse error while if I filter based the hex value
of a subselection of a tag ( like 'mgcp.req.endpoint[0:3] == 65:61:77',
65:61:77 being the hex representation of the ascii string "eaw")
I get correct matches?
Ed
On Mon, 20 Nov 2000 Gilbert_Ramirez@xxxxxxxxxx wrote:
> The difference between dns.id and mgcp.req.verb is that mgcp.req.verb is an
> FT_STRING,
> and dns.id is an integer.
>
> While the display filter code can do some minimal filtering on FT_STRING's,
> the Match Selected
> code was not updated to create display filter strings for FT_STRING types.
>
> I'll add the string-producing capability to the Match Selected routine
> after 0.8.14 is released.
>
> --gilbert
>
> Ed Warnicke <hagbard@xxxxxxxxxxxxxxxxxxx> on 11/20/2000 11:03:49 AM
>
> To: ethereal-dev@xxxxxxxxxxxx
> cc: (bcc: Gilbert Ramirez/Tivoli Systems)
> Subject: [Ethereal-dev] Match Selected
>
>
>
>
> I've been playing around a bit with the Match Selected popup menu from
> the dissection frame (second frame down in the gtk ethereal gui).
>
> When I highlight a syntactical element in a DNS packet (for example) in
> the dissection frame ( like the "Transaction ID") the corresponding tag
> is displayed in the grey textbox in the lower right (like
> "Identification of transaction (dns.id)" ). When I bring up the
> pop up menu by right clicking on the previously selected field in
> the dissection frame and select "Match Selected" it sets the filter
> equal to whatever the syntactical tagging was for the selected frame
> (like "dns.id == 0x94f0").
>
> When I atttempt to do something similar with the MGCP plugin
> (like selecting the "Verb" field from the dissector frame) I get
> correct information displayed in the grey textbox in the lower right
> corner ( like "Name of verb (mgcp.req.verb)") but an attempt to "Match
> Selected" yields a filter which refers to the frame
> ( like "frame[42] == 43:52:43:58" ). Am I failing to do something
> in my dissector? Is there some simple action which one must take to
> enable correct "Match Selected" behavior?
>
> Ed
>
>
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>
>
