Ask Your Question

How can I find the second and subsequent occurrences of a string in a packet?

asked 2021-11-09 17:07:35 +0000

mckeague gravatar image

e.g. the string "message" occurs multiple times within multiple packets in a capture. But when I use the Find Next function it skips the 2nd and subsequent occurrences of the string in a specific packet and instead skips to the next packet that contains the string.

edit retag flag offensive close merge delete


Can you explain more how this would be used?
There is a "Find:" box when Following Protocol Streams. Would that work?
Or does the “Packet Bytes” Pane need it's own search function either in a "Find:" box or on the context pop-up menu?

Chuckc gravatar imageChuckc ( 2021-11-10 04:32:12 +0000 )edit

I'm examining 5G logs and need to find specific parameters that may appear in multiple messages. Often its HTTP2 messaging between multiple network functions. Multiple streams are involved.

mckeague gravatar imagemckeague ( 2021-11-15 21:12:59 +0000 )edit

1 Answer

Sort by » oldest newest most voted

answered 2021-11-10 03:03:24 +0000

cmaynard gravatar image

Unfortunately, that's the way the "Find Next" feature works; it finds the next packet that matches, not the next occurrence, which might very well be within the same packet.

See Issue 11269 - Find Packet/Find Next finds only the first match in the packet.

edit flag offensive delete link more


thanks Christopher.

mckeague gravatar imagemckeague ( 2021-11-15 21:18:35 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools


Asked: 2021-11-09 17:07:35 +0000

Seen: 346 times

Last updated: Nov 10 '21