Ask Your Question

Please allow names for values of fields in filters if the values have names

asked 2023-07-28 10:44:56 +0000

updated 2023-07-28 20:40:31 +0000

Guy Harris gravatar image

is there any way (maybe via an add-on) to make wireshark allow the use of mnemonic values for capture/display filters

eg dns.flags.opcode == 4 is for NOTIFY packets

but one has to remember each of these values

It would be nice if I could filter on

dns.flags.opcode == NOTIFY

or such

This would be even more helpful

edit retag flag offensive close merge delete

2 Answers

Sort by ยป oldest newest most voted

answered 2023-07-28 14:51:44 +0000

cmaynard gravatar image

You can also use the Analyze -> Display Filter Expression feature. For example:

image description

edit flag offensive delete link more

answered 2023-07-28 11:08:40 +0000

grahamb gravatar image

Enhancement requests go here.

edit flag offensive delete link more


Chuckc gravatar imageChuckc ( 2023-07-28 11:42:58 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2023-07-28 10:44:56 +0000

Seen: 86 times

Last updated: Jul 28 '23