Ethereal-dev: Re: [ethereal-dev] Filtering on strings ...

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Richard Sharpe <sharpe@xxxxxxxxxx>
Date: Fri, 08 Sep 2000 17:54:29 +0900
At 02:14 AM 9/8/00 -0400, Gilbert Ramirez wrote:
>On Fri, Sep 08, 2000 at 04:24:51PM +0900, Richard Sharpe wrote:
>> Hi,
>> 
>> can we filter on strings?
>
>Only in the most basic way. The dfilter code does strcmp() calls,
>and you can test for equality.
> 
>> Ie, if there is a:
>> 
>>   MAIL From: <fred@xxxxxxxx>
>> 
>> in the SMTP stream, and it has been dissected, can I set up a field
>> smtp.header.from and filter on it? Eg:
>> 
>>   smtp.header.from == "fred@xxxxxxxx"
>
>Yes, if smtp.header.from really is "fred@xxxxxxxx", that will work.
>If it is "<fread@xxxxxxxx>", the string comparison won't work.
>There is so far no substring capability. 

OK, so it makes sense for me to dissect this stuff further.

>--gilbert
>

Regards
-------
Richard Sharpe, sharpe@xxxxxxxxxx
Samba (Team member, www.samba.org), Ethereal (Team member, www.zing.org)
Contributing author, SAMS Teach Yourself Samba in 24 Hours
Author, Special Edition, Using Samba