Wireshark · Ethereal-dev: [Ethereal-dev] Display-Filter: substring operator for text

[stefan.wenk@xxxxxx]

I'm currently testing an implementation of display filters for SIP.

This works fine: sip.metod == "INVITE"

This does not work: sip.status =="200" , altough sip.status == 32:30:30 is
OK

Why is this the case? 

The substring operator is currently defined for byte strings.

It seems FT_STRING can be checked for text under quotes, but not with
substrings. 

It also seems the display filter parser does not like digits under quotes.

I find the display filter GUI also a bit confusing, because it displays
"Value (Character String)" also for ranges, although this can't be used
afterwards. Or am I doing something wrong?

-- 
+++ GMX - Mail, Messaging & more  http://www.gmx.net +++
Bitte l�cheln! Fotogalerie online mit GMX ohne eigene Homepage!