Wireshark · Ethereal-users: [ethereal-users] Find filter question

[Gary Taylor <gctaylor@xxxxxxxxxx>]

Hi again,

Now that I've got the display filters working I've seen just how useful this
program is.  

In working with the find filter, is it possible to search for text.  The man
page indicates that each protocol field is typed.  Not sure what that means.
What I'm trying to do is search using the Edit>Find Frame feature.  I'd like to
be able to search all the packets for something that is in the data field.  For
example if I wanted to search for ff fd 28.  Or the word whatever in the ascii
field to the right.

I've tried putting various combinations in the find filter and if I put plain
hex in there I get the unable to parse message.  If I prepend it with the word
text eq it gives me an error and closes Ethereal.

Thanks

Gary