Ethereal-dev: Re: [Ethereal-dev] Would it be possible to allow filter expressionslike:

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>
Date: Mon, 8 Mar 2004 18:12:42 +1100
That would be INCREDIBLY useful.

Lets trade,  someone enhances the parser so that it supports this for
filter expressions and I will add the kerberos decryption?


----- Original Message ----- 
From: "Richard Sharpe"
Sent: Monday, March 08, 2004 10:37 AM
Subject: [Ethereal-dev] Would it be possible to allow filter
expressionslike:


> Hi,
>
> It would seem that there is utility in allowing expressions like:
>
>    ip.len > (ip.hdr_len + tcp.hdr_len)
>
> Now, I know that the way to express what I want is tcp.len > 0, but I
> think there will be times when someone wants to specify a filter
> expression that uses the sum of other fields ...
>
> Regards
> -----
> Richard Sharpe, rsharpe[at]richardsharpe.com, rsharpe[at]samba.org,
> sharpe[at]ethereal.com, http://www.richardsharpe.com
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev