Wireshark · Ethereal-dev: [Ethereal-dev] dfilter extension

[Haavard H Garnes <hhg@xxxxxxxxxx>]

Hello.

I am looking into making an adition to the dfilter-language to
facilitate returning of packet-info if the filter matches a packet, in
stead of only returning matched/unmatched.

I was thinking of enabling something like this:

http.request return http.request.method

or

http.request.method=="post" return ip.src

in order to extract information of any kind from a netflow matching the
given criteria.

Is this at all thinkable or doable?

Håvard.