Wireshark · Ethereal-users: [Ethereal-users] Text search/etc

[Ian Schorr <spamcontrol2@xxxxxxxxxxx>]

Forgive me if these are stupid questions, but:

Is it possible for me to build a filter/search on a particular string 
that may occur anywhere inside the packet view or tree view?  I often 
use a feature of Sniffer that allows me to perform plaintext searches in 
this way - if I'm looking for a particular string and can't predict with 
a high degree of probability in what type of call/response or in what 
field it may appear, or if the filter I need to build to find the 
string/value is prohibitively large or complex, it's very handy.

Also, along exact opposite lines, is there a way to define a filter that 
looks for an ASCII string or hex pattern at a particular offset, perhaps 
relative to the beginning of a record, or particular protocol header?

Thanks again,
Ian