Ethereal-users: RE: [Ethereal-users] searching for pattern in packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Visser, Martin (Sydney)" <martin.visser@xxxxxx>
Date: Wed, 7 May 2003 14:20:03 +1000
The command "tethereal -R 'frame[-2:]==08:10' "   will display all
frames that match your condition 

Martin Visser
Network Consultant 
Technology & Infrastructure - Consulting & Integration
HP Services

3 Richardson Place 
North Ryde, Sydney NSW 2113, Australia 
Phone *: +61-2-9022-1670    Mobile *: +61-411-254-513
   Fax 7: +61-2-9022-1800     E-mail * : martin.visserAThp.com



-----Original Message-----
From: darren [mailto:teodarren@xxxxxxxxxxxxx] 
Sent: Wednesday, 7 May 2003 1:28 PM
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] searching for pattern in packets


Hi all,

I would like to check the last two bytes of every packet in one of my
capture files for a particular pattern.

i.e. i would like to know if the last two bytes in my packets contains
0x0810.

Any good and efficient way to do this via tethereal or tcpdump in
combination with grep?

thanx in advance

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users