Wireshark-dev: [Wireshark-dev] Setup the filter as string instead of frame[start offset:length]
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Kumar, Chandan (Chandan)" <chandan.kumar@xxxxxxxxxxxxxxxxxx>
Date: Fri, 10 Aug 2012 11:50:35 +0530
Could you, please help me to make change in Wireshark so that I would be able to select IE by means of filter like others element?
 
I want to make IE’s as a filterable field instead of displaying frame [start offset: length]
 
I Did some change for this into epan/proto.c file in Wireshark – 1.6.2
Line number---->6934
 
ptr += g_snprintf(ptr, (gulong) (buf_len-(ptr-*filter)), "frame[%d:%d] == ", finfo->start, length);   
 
this line I have change like
ptr += g_snprintf(ptr, (gulong) (buf_len-(ptr-*filter)),"%s == ", finfo->rep->representation);
 
I am able to see the strings which want to make filterable using (Apply as filter ---> Selected) but some wrong message windows came & stop the parsing for new filter.
 
What I have to do to display correctly.