Wireshark mailing list archives
the filter of FT_NONE
From: 李娜 <olinalee () 126 com>
Date: Fri, 10 Sep 2010 15:36:45 +0800 (CST)
Hello All, I encounter an issue when I filter thespecificsub_tree_data of the parent tree.In other words,if the tree have multi same sub_tree,I want to know one of them,I think maybe the define of datafields as FT_NONE, how I can filter it ? And I updated my epan/proto.c file accordinghttp://osdir.com/ml/network.wireshark.devel/2006-07/msg00200.html ,but it doesn't work. Subject: [Patch] Allow FT_NONE item to be filtered from menu - msg#00200 Index: epan/proto.c =================================================================== --- epan/proto.c (revision 18772) +++ epan/proto.c (working copy) @@ -5109,6 +5109,13 @@ * These all have values, so we can match. */ return TRUE; + + case FT_NONE: + /* + * Doesn't have a value, but may still want to test for its + * presence in a trace + */ + return TRUE; default: /* @@ -5286,9 +5293,12 @@ break; case FT_PROTOCOL: + case FT_NONE: + /* Just want to test for the presence of these */ buf = ep_strdup(finfo->hfinfo->abbrev); break; + default: /* * This doesn't have a value, so we'd match -- Thanks & Best Regards Olina Lee 网易邮箱,没有垃圾邮件的邮箱。 -- Thanks & Best Regards Olina Lee
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- the filter of FT_NONE 李娜 (Sep 10)