Wireshark · Ethereal-users: Re: [Ethereal-users] Search and highlight string in hex window

[Guy Harris <gharris@xxxxxxxxx>]

On Fri, Jun 11, 2004 at 03:42:42PM -0500, Campos, Joe wrote:
> I was wondering if there was a way to search on a string but then also
> have it highlight the respective text in the hex window. Currently I can
> only search through a trace file and it will take me to the right packet
> but it does not highlight the data in the hex window.

There is, but it involves writing code. :-)

I.e., Ethereal doesn't currently, when you search for text in the packet
detail window, select the item that matched.  It probably should, but
somebody'd have to write the code to make it do so.

That then raises the question of whether, if *more than one* item in the
packet detail window would match, the next search for that text should
match the next match in the same packet, or the first match in a
subsequent packet.  In at least one case, as I remember, the "next match
in the same packet" behavior would have been useful, although if you're
looking for packets, the "first match in a subsequent packet" behavior
would probably be what you want.