Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: Re: [Ethereal-users] Re: ICMP

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Tue, 22 Mar 2005 13:15:16 -0800
Andrew Hood wrote:

Is there a way of saying that a filter is only to match on headers and not payload, and vice versa?

Filters work on protocol trees; what, in a protocol tree, is the distinction between a "header" and "payload"?