Wireshark · Wireshark-dev: Re: [Wireshark-dev] display filter for expert/tcp analysis info

["Abhik Sarkar" <sarkar.abhik@xxxxxxxxx>]

Hi Nathan,

Would using the tcp.analysis.lost_segment and other display filters
from the tcp.analysis family not meet your requirement? Or do you
specifically want to have display filters on expert analysis items for
a broader scope?

Regards,
Abhik.

On Fri, Jul 25, 2008 at 7:12 AM, Nathan Jennings <njen@xxxxxxxxxxxx> wrote:
> Hello,
>
> Is there a way to use the display filter syntax to filter packets based
> on the expert/tcp analysis output (strings)?
>
> What I'd like to do is construct a display filter that matches an
> expert/tcp analysis string like "TCP segment lost", or something
> similar. I could then use this filter in the IO Graph window to
> show/highlight the affected packets in the line graph.
>
> I looked at the wishlist on the Wiki but didn't see anything.
>
> Any ideas on how difficult this might be to implement? Maybe point me to
> where I might get started?
>
> Thanks, -Nathan
>
> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> https://wireshark.org/mailman/listinfo/wireshark-dev
>