Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] Wireshark filter for cyclic messages

Date: Tue, 8 Jun 2010 11:54:01 +0200

Hello list,

I have the following problem:
I'm capturing EtherNet/IP traffic with cyclic I/O messages. This means for instance, I start a conenction with a packet rate of 100ms.

I send a string, let's say 'test1' to the device and the device answers with 'test2'. I capture the following:

0 ms: -> test1
            <- test2
100ms: ->test1
                <- test2
200ms: ->test1
               <- test2
and so on... until I send a new command:
900ms: -> test3
               <- test4
1000ms: -> test3
                  <- test4

Is there a possibility to capture only the messages, where the message content is changing, like the following:
0 ms: ->test1
            <- test2
900ms: -> test3
               <- test4

I hope it got clear what I mean.

Thanks in advance

Markus