Wireshark · Ethereal-dev: Re: [Ethereal-dev] Would it be possible to allow filter expressionslike:

["Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>]

That would be INCREDIBLY useful.

Lets trade,  someone enhances the parser so that it supports this for
filter expressions and I will add the kerberos decryption?


----- Original Message ----- 
From: "Richard Sharpe"
Sent: Monday, March 08, 2004 10:37 AM
Subject: [Ethereal-dev] Would it be possible to allow filter
expressionslike:


> Hi,
>
> It would seem that there is utility in allowing expressions like:
>
>    ip.len > (ip.hdr_len + tcp.hdr_len)
>
> Now, I know that the way to express what I want is tcp.len > 0, but I
> think there will be times when someone wants to specify a filter
> expression that uses the sum of other fields ...
>
> Regards
> -----
> Richard Sharpe, rsharpe[at]richardsharpe.com, rsharpe[at]samba.org,
> sharpe[at]ethereal.com, http://www.richardsharpe.com
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev