Wireshark mailing list archives

Using the per-packet protocols string when filtering

From: Guy Harris <guy () alum mit edu>
Date: Thu, 10 May 2012 20:03:53 -0700


On May 10, 2012, at 1:24 AM, Anders Broman wrote:

Filtering:
- We have a string with per packet protocols, could that string be saved and used in filtering - don't dissect the 
packet if it does not contain the filtered protocol.


If you're referring to the "frame.protocols", that is, unfortunately, computed as part of the process of dissecting the 
packet, so....


___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread:

Random feature and enhancements ideas (topics for Sharkfests developers room?) Anders Broman (May 10)
- Re: Random feature and enhancements ideas (topics for Sharkfests developers room?) Jasper Bongertz (May 10)
- Reducing memory usage by saving fewer time stamps in frame_data Guy Harris (May 10)
- Reducing memory usage by not storing reassembled packet data Guy Harris (May 10)
  - Re: Reducing memory usage by not storing reassembled packet data Anders Broman (May 10)
- Using the per-packet protocols string when filtering Guy Harris (May 10)
  - Re: Using the per-packet protocols string when filtering Anders Broman (May 10)
    - Re: Using the per-packet protocols string when filtering Guy Harris (May 10)
    - Re: Using the per-packet protocols string when filtering Anders Broman (May 10)