Wireshark-dev: Re: [Wireshark-dev] Is there a way to easily go to the next packet that satisfie
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Sat, 20 Mar 2021 14:28:04 -0700
On Mar 20, 2021, at 2:23 PM, ronnie sahlberg <ronniesahlberg@xxxxxxxxx> wrote:

> Doesn't wireshark already have this?
> 
> CTRL-F and then type in the filter string
> then click "Find" and it will cycle through the packets that are matching.

Yes, "Find" (Ctrl-F on Windows and UN*Xes not named "macOS", Command+F on macOS) can search based on:

	a pattern-matching expression ("Find" calls it a "Display Filter");

	a hex value;

	a string;

	a regular expression.

The latter three match on raw frame contents; the former is the same as display filters, read filters, coloring rule expressions, etc..