ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] Suggestion for small change to display filter syntax

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Graeme Hewson <ghewson@xxxxxxxxxxxxxxxxxxx>
Date: Sun, 04 Jul 2004 20:10:48 +0100
Graeme Hewson wrote:

The syntax for slices in display filters currently includes:

    [i:]     start_offset = i, end_offset = end_of_field

I propose we also allow [i-] to mean the same thing. ISTM this is more natural, since [i:j] means j is a length, while [i-j] means j is an offset, so [i-] would be a better fit to the documentation.

No replies to this, but I attach a patch to do it anyway. I had some trouble remembering if I should use [i:] or [i-] for "a slice starting at offset i and ending at the end of the field". Now either will work.


Graeme

Attachment: ethereal-filter.pod.template.patch.gz
Description: application/gzip

Attachment: grammar.patch.gz
Description: application/gzip