So, back to your filter, if the Via: headers are put after one another
(as in your example), you could use 'udp matches "Via: .*\015\012Via: .*"'.
Hope this helps, Cheers,
Sake
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users