Wireshark mailing list archives

Re: Is there a way to easily go to the next packet that satisfies a filter string without filtering the packets


From: Guy Harris <gharris () sonic net>
Date: Sat, 20 Mar 2021 14:28:04 -0700

On Mar 20, 2021, at 2:23 PM, ronnie sahlberg <ronniesahlberg () gmail com> wrote:

Doesn't wireshark already have this?

CTRL-F and then type in the filter string
then click "Find" and it will cycle through the packets that are matching.

Yes, "Find" (Ctrl-F on Windows and UN*Xes not named "macOS", Command+F on macOS) can search based on:

        a pattern-matching expression ("Find" calls it a "Display Filter");

        a hex value;

        a string;

        a regular expression.

The latter three match on raw frame contents; the former is the same as display filters, read filters, coloring rule 
expressions, etc..
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: