Wireshark mailing list archives

FW: Setup the filter as string instead of frame[start offset:length]


From: "Kumar, Chandan (Chandan)" <chandan.kumar () alcatel-lucent com>
Date: Thu, 9 Aug 2012 10:45:01 +0530


My request as follows:
Could you, please help me to make change in Wireshark so that I would be able to select IE by means of filter like 
others element?

I want to make IE's as a filterable field instead of displaying frame [start offset: length]

Did some change for this into epan/proto.c file in Wireshark - 1.6.2
Line number---->6934

ptr += g_snprintf(ptr, (gulong) (buf_len-(ptr-*filter)), "frame[%d:%d] == ", finfo->start, length);

this line I have change like
ptr += g_snprintf(ptr, (gulong) (buf_len-(ptr-*filter)),"%s == ", finfo->rep->representation);

I am able to see the strings which want to make filterable using (Apply as filter ---> Selected) but some wrong message 
windows came & stop the parsing for new filter.
Attaching two snap shot 1st with the Wireshark filter & 2nd what I have implemented.

      [X]                                                    [X]


Thanks
Chandan



___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: