Wireshark-users: [Wireshark-users] Display filter

From: "Irakli Natshvlishvili" <iraklin@xxxxxxxxx>
Date: Wed, 2 May 2007 10:38:44 -0800

Question:

Using display filters is there a way to find if a particular string occurs more then once in a packet?

For example, if there is an UDP packet which has payload "this is one 1234 two one test", then filtering via UDP contains "one" will display this UDP packet.

But I want to filter ALL packets, where this particular string occurs more then once.

Any way do do it?

--
I.N.