Wireshark · Ethereal-users: [Ethereal-users] Syntax rules for filter on Tethereal

["Alberto Coatti" <al.coax@xxxxxxxxx>]

Hello,

I have an issue relevant to "field match" not to the "value match".

Only to clarify my meaning of "field" and "value", for me the filter _expression_ is:

field operator value

 

The issue is that, for each packet ethereal and tethereal looks for a field that contain the words I write as field. I need that ethereal and tethereal looks for a field that exactly match it.

 

In particular, here I am with an example:
... -R ip.len==24

This filter does not match not only ip.len equal to 24
but also
icmp.mip.length==24
ncp.ip.length==24
and so on
 

because the field "icmp.mip.length" contains the word "ip.len".

How can I write the filter to have only ip.len?

Thanks in advance

Alberto C.

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users