Ask Your Question
0

search packet

asked 2021-05-11 22:16:50 +0000

quest4answer gravatar image

Hello:

is there anyway to filter all the packets with specific word in "info" column. basically i have username abc pops up on info column. i can search one by one packet and see the username but i wanted to see all the packets with that username .. i tried frame matches username but not successful thanks

edit retag flag offensive close merge delete

2 Answers

Sort by ยป oldest newest most voted
0

answered 2021-05-12 08:07:45 +0000

grahamb gravatar image

This is a fairly frequent question, and no you can't filter by column content. You can filter by field and as (almost) everything that is added to the info column is also a field somewhere, you just need to identify the appropriate field.

The general approach to this is to select one of the packets, (by manually reviewing the info column), and then in the packet details pane locate the field that contains the required information. Right click the field, select Apply As Filter -> Selected and the appropriate filter expression will be added to the filter bar and the packet list will be filtered according to the expression.

edit flag offensive delete link more
1

answered 2021-05-11 22:59:32 +0000

Chuckc gravatar image

There is a Lua plugin available that will add another column you can search on.

filtcols: A post-dissector to allow filtering on Protocol and Info columns

edit flag offensive delete link more

Comments

that worked .. thanks

quest4answer gravatar imagequest4answer ( 2021-05-12 19:44:31 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2021-05-11 22:16:50 +0000

Seen: 388 times

Last updated: May 12 '21