Using sharkd to search through packets
Sharkd implements many features of Wireshark, but I didn't find a way to search through packets like CTRL+F does in the UI. Is this possible?
Asked: 2023-06-20 06:02:14 +0000
Seen: 195 times
Last updated: Jun 20 '23
CTRL+S saves the file. Did you mean CTRL+F or CTRL+G?
Yes, you are right, I meant CTRL+F
Can you work with the list output from a
frames
request?I think that approach might work for display filters, but when it comes to string search or hex search, it seems like there would be an excessive amount of data that I would need to send to the client in order to sift through the packets.
https://www.wireshark.org/docs/wsug_h...
See "6.4.2.2. Some Examples" for searches on hex bytes and strings.
A display filter on
frame contains "foo"
does a string search.