Ethereal-dev: [Ethereal-dev] Display Filter Syntax for sub-dissectors

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Mike Duigou <ethereal@xxxxxxxxxx>
Date: Fri, 16 Sep 2005 10:43:08 -0700
The JXTA dissector will call out to sub-dissectors on the basis of mime-type for payload content. Most often this is the XML or SSL dissectors.

This works great for displaying the content of JXTA PDUs. I've run into a problem though. It seems there is no filter syntax for sub-dissection. I can filter down to the point where the sub-dissection begins, but not past that point.

If I promote the sub-dissections trees to the top of the element tree rather than embedding them within my protocol tree then I can filter successfully That doesn't really work though since the elements are often too numerous and not really standalone from the messages in which they are inclued.

Ideas?

Mike