ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] the filter of FT_NONE

From: 李娜 <olinalee@xxxxxxx>
Date: Fri, 10 Sep 2010 15:36:45 +0800 (CST)
Hello All,
I encounter an issue when I filter the specific sub_tree_data of the parent tree.In other words,if the tree have multi same sub_tree,I want to know one of them,I think maybe the define of datafields as FT_NONE, how I can filter it ?
And I updated my epan/proto.c file according http://osdir.com/ml/network.wireshark.devel/2006-07/msg00200.html ,but it doesn't work.

Subject: [Patch] Allow FT_NONE item to be filtered from menu - msg#00200

Index: epan/proto.c
===================================================================
--- epan/proto.c (revision 18772)
+++ epan/proto.c (working copy)
@@ -5109,6 +5109,13 @@
* These all have values, so we can match.
*/
return TRUE;
+
+ case FT_NONE:
+ /*
+ * Doesn't have a value, but may still want to test for
its
+ * presence in a trace
+ */
+ return TRUE;

default:
/*
@@ -5286,9 +5293,12 @@
break;

case FT_PROTOCOL:
+ case FT_NONE:
+ /* Just want to test for the presence of these */
buf = ep_strdup(finfo->hfinfo->abbrev);
break;

+
default:
/*
* This doesn't have a value, so we'd match

--

Thanks & Best Regards

 

Olina Lee

 



网易邮箱,没有垃圾邮件的邮箱。



--

Thanks & Best Regards

 

Olina Lee

 



您想拥有和网易免费邮箱一样强大的软件吗?