Wireshark · Ethereal-dev: Re: [Ethereal-dev] Syntax for frame contains

["Greg Morris" <GMORRIS@xxxxxxxxxx>]

My fault, I was looking for Unicode data. How do you intend on handling Unicode? I tested with

 

frame contains ff.ff.ff.a7.fd

And this works great.

 

I also tested with

frame contains test

This also works great as long as the data pattern is consistent (Non-Unicode) but of course fails with Unicode.

 

I was unable to filter with the frame contains on any Unicode patterns. I tried T.e.s.t, T e s t, etc... with no luck.

 

Suggestions? This really would make this feature more robust.,

 

Greg

>>> Gilbert Ramirez <gilramir@xxxxxxxxx> 8/27/2003 12:20:36 PM >>>

On Wed, 2003-08-27 at 13:06, Greg Morris wrote:
> Gilbert,
> 
> I am having trouble getting the frame contains "text" to work. It seems
> to work with a single letter but fails anytime I add more then one
> character to the string. Can you provide an example syntax?
> 
> Thanks,
> Greg
> ----
>

frame contains "test"

should select any frame that has the string "test" in it.

"Should" :)

--gilbert