Wireshark mailing list archives

2007 - String search (multiple occurrences) in packets


From: chuck c <bubbasnmp () gmail com>
Date: Mon, 15 Nov 2021 17:26:05 -0600

Was this not implemented due to "no time/add it to the list" or because
it's a large undertaking?

https://www.wireshark.org/lists/wireshark-dev/200711/msg00265.html
[Wireshark-dev] Wish: Mark/Find the element matching the display filter

"On 19. nov.. 2007, at 23.58, Guy Harris wrote:

That does raise an interesting question - if a pattern matches *more
than one* field in a packet, should "find next" find the next instance
that matches, even if it's in the same packet, or should it find the
next instance in that packet and, if there is no next instance in that
packet, search subsequent packets? There are probably places where the
former is useful and places where the latter is useful.
The current implementation of the search does only find the first instance
in a packet. In my scenario I have alot of elements in each packet, with
many matching the search criteria. I would really like to find each of them
when performing a search.

--
Stig Bjørlykke
'
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: