Re: Fitlering messages based on criteria.

[Guy Harris <guy () alum mit edu>]

On Aug 4, 2010, at 10:40 PM, Sake Blok wrote:

> > > Please advise if its possible in wireshark to display messages based
> > > on criteria. E.g. I would like to get traces for all the messages for
> > > Particular IMSI.
> > >
> > > E.g. If IMSI is 404201234567890
> > > Get Transaction id for all the traces where imsi matches and then show
> > > all the messages which matches the transaction id. This way I will get
> > > all the messages for the transactions matching for this imsi.
> > > Appreciate your help in this regard.
>
> There is no direct way in wireshark/tshark to achieve what you describe.

Is this the sort of thing that MATE:

        http://wiki.wireshark.org/Mate

could do?
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe