Wireshark mailing list archives

Display filter field variables


From: João Valverde via Wireshark-dev <wireshark-dev () wireshark org>
Date: Fri, 8 Oct 2021 16:09:13 +0100

Hi,

The GUI display filter has an interesting but little-known (?) feature to replace field values for the selected frame with the syntax ${<field>}, which I only learned about in bug #15504, and confused me at first. This all happens before the expression is compiled and is different from display filter macros.

Does anyone know more about this? And where it is implemented in the GUI code?
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: