Wireshark · Ethereal-users: Re: [ethereal-users] Display filters: is there anyway to filter using nfs.name

[Gilbert Ramirez <gramirez@xxxxxxxxxx>]

On Tue, 01 Aug 2000 11:55:21 Narendra Chaparala wrote:
> 
> Hi,
> 
>     Is there anyway to filter based on file handle name in ethereal? for
> e.g,
> can i filter the output with nfs.name == <filename>? If i do that, it
> reports
> parse error!!!!
>     I couldn't find any way to filter. Could anyone help me?
> 
>     thanks,
>     Narendra

Well, I felt guilty that string filtering wasn't implemented yet, so
I went ahead and implemented it in the current display filter code
(I'm planning on re-writing the display filter code some day, but that's no
excuse for things not working now).

I decided not to provide a patch against whichever version of Ethereal
you're running because some protocol tree routines have changed also,
so I'd have to supply a larger patch than just the display filter changes.

I made a distribution tarball that you can download at:

http://www.xiexie.org/ethereal/ethereal-0.8.10-20000801.tar.gz

It's a distribution of the code currently in CVS, including the string
chagnes.

So, you can now filter via:

nfs.name == some_name
nfs.name != some_name
nfs.name == "some name with spaces"
nfs.name != "some name with spaces"

I have not yet put in a mechanism to escape-out the double-quote, so you can't
yet filter on a string that contains both a space and a double-quote.

--gilbert