Is there a way to search for a pattern that is split across different packets?

asked 2022-11-23 16:08:09 +0000

JimL gravatar image

I am searching for a byte pattern that can begin in the payload of one packet but spill over into the payload of the next packet. Is there a way to use Wireshark to search/filter for the pattern?

edit retag flag offensive close merge delete

Comments

Are the packets part of a protocol that supports reassembly?
Are they recognized as being part of a stream where you could search the stream data:
Following Protocol Streams
Do you need to automate this process using tshark?
-z follow,prot,mode,filter[,range]

Chuckc gravatar imageChuckc ( 2022-11-24 01:48:32 +0000 )edit
add a comment