Riverbed Cascade Pilot Personal Edition: Take Wireshark to the Next Level - Advanced Triggers and Alerts; Web and VoIP Analytics; Long-Term Trending and Forensics; Deep Packet Analysis with Wireshark

Wireshark-users: Re: [Wireshark-users] Display filter

Date Index Thread Index Other Months All Mailing Lists

Date Prev Date Next Thread Prev Thread Next

From: "Irakli Natshvlishvili" <iraklin@xxxxxxxxx>
Date: Wed, 2 May 2007 22:38:49 -0800

OK, my bad. The following filter

udp matches "Via.*\x0d\x0aVia.*"

DOES work.

Thanks everybody.

--i.n.

On 5/2/07, Irakli Natshvlishvili <iraklin@xxxxxxxxx> wrote:

I've just tried. Does not work.

--i.n.

On 5/2/07, Sake Blok < sake@xxxxxxxxxx> wrote:

So, back to your filter, if the Via: headers are put after one another
(as in your example), you could use 'udp matches "Via: .*\015\012Via: .*"'.

Hope this helps, Cheers,

Sake
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users

--
I.N.

--
I.N.

References:
- [Wireshark-users] Display filter
  - From: Irakli Natshvlishvili
- Re: [Wireshark-users] Display filter
  - From: Gerald Combs
- Re: [Wireshark-users] Display filter
  - From: Irakli Natshvlishvili
- Re: [Wireshark-users] Display filter
  - From: Gerald Combs
- Re: [Wireshark-users] Display filter
  - From: Irakli Natshvlishvili
- Re: [Wireshark-users] Display filter
  - From: Sake Blok
- Re: [Wireshark-users] Display filter
  - From: Irakli Natshvlishvili

Prev by Date: [Wireshark-users] Is there case and strong evidence that wireshark/ethereal is accepted and used by any big operators like vodafone, TIM?
Next by Date: Re: [Wireshark-users] Display filter
Previous by thread: Re: [Wireshark-users] Display filter
Next by thread: Re: [Wireshark-users] Display filter
Index(es):
- Date
- Thread