Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] problem with "contains" filter

From: Yang Ning <yang.ning@xxxxxxxxxxx>
Date: Mon, 11 May 2009 14:15:22 -0400

I have helped add/maintain a dissector that was written by someone else. Only recently did I discover that wireshark crashes if

the display filter uses "contains".  

 

Is there something that I have to set so that "contains" keyword can be used in the display filter?

How does it know what after which offset in the tvb, it is to search for?