ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-users: Re: [Ethereal-users] Display Filter: one or more occurences.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Wed, 27 Feb 2002 13:20:45 -0800
On Wed, Feb 27, 2002 at 01:05:16PM -0800, Gary Taylor wrote:
> Can I filter for one or more occurences of a specific hex value
> in any portion of a field?

No.  We don't have that sort of pattern matching; we only support exact
matching of entire fields or, in the case of fields where you can match
subranges, exact matching of specific subranges (e.g., "the 5 bytes
starting at offset 12 in the Telnet payload are 00:01:02:03:04").