Ethereal-users: [Ethereal-users] filtering on two packets at the same time

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Richard Harvey Chapman <hchapman@xxxxxxxx>
Date: Thu, 22 Feb 2001 05:15:22 -0800 (PST)
either capture or display filtering.

I'd like to look for sequential packets with duplicate UDP data. For
example, I may get two TFTP packets in a row both of type ACK and with
block number 1176. I'd like to just see those two packets.

Is this possible?

If not, how hard would it be to write a program to do this? Is there a
library that I could use to parse a capture file?

Thanks,

R.