ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-users: Re: [Ethereal-users] Re: ICMP

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Tue, 22 Mar 2005 13:15:16 -0800
Andrew Hood wrote:

Is there a way of saying that a filter is only to match on headers and not payload, and vice versa?

Filters work on protocol trees; what, in a protocol tree, is the distinction between a "header" and "payload"?