Wireshark mailing list archives
Re: Seaching in the data pane would be useful ...
From: Christopher Maynard <Christopher.Maynard () gtech com>
Date: Fri, 9 Aug 2013 16:39:40 +0000 (UTC)
Richard Sharpe <realrichardsharpe@...> writes:
Sure, I can do the search, and I did, but the actual info I am interested in, like the priority, etc, is buried among 230 entries and I have to patiently scroll until I find it. That is hard to do.
I see your point. My attempt using tshark didn't produce very good results either. tshark -r kdcqueries.pcap -Y dns.resp.addr -T fields -e frame.number -e dns.resp.name -e dns.resp.addr There does seem to be a limitation in the search feature where it only finds a packet containing a match, but not each highlighted matching instance of the search criteria within a packet when you "search next/previous". ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Seaching in the data pane would be useful ... Richard Sharpe (Aug 09)
- Re: Seaching in the data pane would be useful ... Christopher Maynard (Aug 09)
- Re: Seaching in the data pane would be useful ... Richard Sharpe (Aug 09)
- Re: Seaching in the data pane would be useful ... ronnie sahlberg (Aug 09)
- Re: Seaching in the data pane would be useful ... Richard Sharpe (Aug 09)
- Re: Seaching in the data pane would be useful ... Christopher Maynard (Aug 09)
- Re: Seaching in the data pane would be useful ... Richard Sharpe (Aug 09)
- Re: Seaching in the data pane would be useful ... ronnie sahlberg (Aug 09)
- Re: Seaching in the data pane would be useful ... Christopher Maynard (Aug 09)
- Re: Seaching in the data pane would be useful ... Guy Harris (Aug 09)