First time here? Check out the FAQ!

Ask Your Question
0

How can I find the second and subsequent occurrences of a string in a packet?

asked Nov 9 '1

mckeague gravatar image

e.g. the string "message" occurs multiple times within multiple packets in a capture. But when I use the Find Next function it skips the 2nd and subsequent occurrences of the string in a specific packet and instead skips to the next packet that contains the string.

Preview: (hide)

Comments

Can you explain more how this would be used?
There is a "Find:" box when Following Protocol Streams. Would that work?
Or does the “Packet Bytes” Pane need it's own search function either in a "Find:" box or on the context pop-up menu?

Chuckc gravatar imageChuckc ( Nov 10 '1 )

I'm examining 5G logs and need to find specific parameters that may appear in multiple messages. Often its HTTP2 messaging between multiple network functions. Multiple streams are involved.

mckeague gravatar imagemckeague ( Nov 15 '1 )

1 Answer

Sort by » oldest newest most voted
0

answered Nov 10 '1

cmaynard gravatar image

Unfortunately, that's the way the "Find Next" feature works; it finds the next packet that matches, not the next occurrence, which might very well be within the same packet.

See Issue 11269 - Find Packet/Find Next finds only the first match in the packet.

Preview: (hide)
link

Comments

thanks Christopher.

mckeague gravatar imagemckeague ( Nov 15 '1 )

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: Nov 9 '1

Seen: 457 times

Last updated: Nov 10 '21