Wireshark · Wireshark-dev: Re: [Wireshark-dev] Wish: Mark/Find the element matching the display filter

[Andrew Feren <acferen@xxxxxxxxx>]

--- Stephen Fisher <stephentfisher@xxxxxxxxx> wrote:

> On Mon, Nov 19, 2007 at 02:43:13PM -0700, Stephen Fisher wrote:
> > On Mon, Nov 19, 2007 at 10:29:12PM +0100, Stig Bj?rlykke wrote:
> > 
> > > Does wireshark have any functionality like this?  I know we have "Find
> > > Packet", but this does not display the matching element in the packet.
> > 
> > Wireshark used to do this - I remember adding the feature myself.  I'll
> > take a look at why it isn't working right now.
> 
> My bad, it does work as I had intended.  It highlights the field (with
> the function highlight_field()) whenever you do a hex or string search,
> but not when you do a filter search.  Should we add filter search
> matches too?

Yes, please!

I'm willing to help if someone can point me in the right direction.  I
frequently work with several protocols that would benefit from this
functionality.

-Andrew

-Andrew Feren
 acferen@xxxxxxxxx