Ethereal-dev: [Ethereal-dev] Would it be possible to allow filter expressions like:

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Richard Sharpe <rsharpe@xxxxxxxxxxxxxxxxx>
Date: Sun, 7 Mar 2004 15:37:58 -0800 (PST)
Hi,

It would seem that there is utility in allowing expressions like:

   ip.len > (ip.hdr_len + tcp.hdr_len)

Now, I know that the way to express what I want is tcp.len > 0, but I 
think there will be times when someone wants to specify a filter 
expression that uses the sum of other fields ...
 
Regards
-----
Richard Sharpe, rsharpe[at]richardsharpe.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com