Wireshark · Ethereal-dev: [Ethereal-dev] Would it be possible to allow filter expressions like:

Ethereal-dev: [Ethereal-dev] Would it be possible to allow filter expressions like:

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Richard Sharpe <rsharpe@xxxxxxxxxxxxxxxxx>

Date: Sun, 7 Mar 2004 15:37:58 -0800 (PST)

Hi,

It would seem that there is utility in allowing expressions like:

   ip.len > (ip.hdr_len + tcp.hdr_len)

Now, I know that the way to express what I want is tcp.len > 0, but I 
think there will be times when someone wants to specify a filter 
expression that uses the sum of other fields ...
 
Regards
-----
Richard Sharpe, rsharpe[at]richardsharpe.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com

Follow-Ups:
- Re: [Ethereal-dev] Would it be possible to allow filter expressionslike:
  - From: Ronnie Sahlberg

Prev by Date: [Ethereal-dev] Bug in Statistics-->IO Graphs
Next by Date: Re: [Ethereal-dev] Build problems in gtk/: auto_scroll_live undeclared
Previous by thread: [Ethereal-dev] Bug in Statistics-->IO Graphs
Next by thread: Re: [Ethereal-dev] Would it be possible to allow filter expressionslike:
Index(es):
- Date
- Thread