Please allow names for values of fields in filters if the values have names

Mathias
1

Guy Harris
19890 ●3 ●660 ●207

is there any way (maybe via an add-on) to make wireshark allow the use of mnemonic values for capture/display filters

eg dns.flags.opcode == 4 is for NOTIFY packets

but one has to remember each of these values

It would be nice if I could filter on

dns.flags.opcode == NOTIFY

or such

This would be even more helpful

2 Answers

Sort by » oldest newest most voted

You can also use the Analyze -> Display Filter Expression feature. For example:

image description

Enhancement requests go here.

Chuckc ( 2023-07-28 11:42:58 +0000 )edit

Please start posting anonymously - your entry will be published after you log in or create a new account.