Ethereal-users: Re: [Ethereal-users] Display filter question!!

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>
Date: Thu, 22 May 2003 22:21:18 +1000
Currently it is not possible.

It would be possible if
* SSL dissector was changed to place hf filterable items for the SSL trees
such as the SSLv3RecordLayer tree, which would be easy to do
and
* someone enhanced the filter languange to add a COUNT() operation so that a
display filter such as
COUNT(ssl.record_layer)>1 could be used  which would be hard to do.


A COUNT(<hf_index>) operation added to the display filter language would be
useful.



----- Original Message -----
From: Mathias Björkander TACMa
To: 'ethereal-users@xxxxxxxxxxxx'
Sent: Thursday, May 22, 2003 6:18 PM
Subject: [Ethereal-users] Display filter question!!



Hi All.

Is there any way of setting up a display filter and/or a capture filter that
trigs at SSL packages that includes more then one Record Layer (Se attached
screen dump of Ethereal)?