Wireshark · Ethereal-dev: Re: [Ethereal-dev] Re: rev 14518: /trunk/epan/dissectors/: packet-ip.c

[Gilbert Ramirez <gilbertr@xxxxxxxxx>]

We do want to do the same, and the infrastructure allows for it ---
the display filter "virtual machine" can compare lists of fields and
lists of values, it just has to be done.

--gilbert

On 6/2/05, Guy Harris <gharris@xxxxxxxxx> wrote:
> ronnie sahlberg wrote:
> 
> > These resolved hostnames, would it make sense to make
> > ip.src and ip.dst into expansions and put the resolved name ip.host
> > down there so they become visible?
> 
> Presumably the intent is to allow
> 
>         ip.host contains "google"
> 
> or something such as that?  (Exact matches on the host can be done with
> 
>         ip.addr eq www.google.com
> 
> Speaking of which, libpcap capture filters will, if a host name has more
> than one IP address corresponding to it, match any of the addresses; we
> might want to do the same with display filters.)
> 
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
> 
>