Ethereal-dev: [ethereal-dev] filter question

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Uwe Girlich <Uwe.Girlich@xxxxxxxxxxx>
Date: Fri, 11 Aug 2000 13:11:18 +0200
Hello!

I have attached a tcpdump file with one NFS and one NLM packet. Both are
related to the same file (file handle). If I try to "Match Selected" in the
2nd (NLM) packet for
NLM/object/file number/inode
I get the display filter expression 
"nfs.fh.fn == 225737"
but this filter finds only the 1st (NFS) packet.

Does this mean, that the first part of a variable name "nfs.fh.fn" -> "nfs"
leads to packets with this protocol only?

In fact I implemeted the file handle parse code only for this kind of
application. The NFS mount process is another example, where the same file
handle comes in different protocols but is always parsed and included in the
tree with the same function and the same names (nfs.fh....).

I never looked a the display filter code, so I have no idea where to search for
this problem.

Uwe

Attachment: fn.gz
Description: application/gunzip