Wireshark · Ethereal-users: Re: [Ethereal-users] packet search question ...

["Jon Baer" <ethereal@xxxxxxxxxxx>]

i was looking @ the wishlist ... and noticed frame[0:] ~= "string" to be @
the bottom of the list, for both capture + display, is there a reason why
the frame find code could not be reapplied to that filter?  (just a general
question) ... this of course is pertaining to doing it without regex support
for the time being.

thanks guy.

- jon

pgp key: http://www.jonbaer.net/jonbaer.asc
fingerprint: F438 A47E C45E 8B27 F68C 1F9B 41DB DB8B 9A0C AF47


----- Original Message ----- 
From: "Guy Harris" <guy@xxxxxxxxxxxx>
To: "Jon Baer" <ethereal@xxxxxxxxxxx>
Cc: <ethereal-users@xxxxxxxxxxxx>
Sent: Sunday, August 10, 2003 12:16 PM
Subject: Re: [Ethereal-users] packet search question ...


> On Sat, Aug 09, 2003 at 03:46:46PM -0700, Jon Baer wrote:
> > just downloaded the latest version  (0.9.14) ... and noticed the change
log:
> >
> > * Ethereal now supports searching for arbitrary text and binary data in
> > frames.
> >
> > the faq reflects this:
>
> The problem is that it *doesn't* reflect that.
>
> I've updated the FAQ.
>
> > can someone post an example?
>
> The new FAQ pretty much says it all:
>
> In 0.9.14, you can search for, but not filter, packets that have
> a particular string; this has been added to the "Find Frame"
> dialog ("Find Frame" under the "Edit" menu, or control-F).
>