Ethereal-dev: [Ethereal-dev] Limiting scope of filters by subtree

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: George Utley <gutxxx@xxxxxxxxx>
Date: Thu, 29 Sep 2005 01:15:42 +1000
Does anyone know if it possible to limit the scope of filter queries to a given subtree, similar to XPath? I haven't been able to find one. For instance, with DNP3, the protocol can specify multiple objects within a frame, with common fields between the objects. I can't find a way to limit the search to a specific object within a frame, or to a specific object type. For instance, it would be useful if I could type something like dnp3.al.ptnum==7[dnp3.al.timestamp > DATE] to find a subtree containing an object with point number 7, and then search only that subtree and all its descendents for a timestamp later than DATE.
 
If such a facility is not already available, does anyone else think it would be a useful feature? Would there be any difficulties in implementing it?