Display filter: Destination contains "microsoft" ?
 
  
 
  
 
 
 
 
 
 
    
        
        asked Jan 24 '4  
 
 Rudi gravatar image  
 
 
 
 
 
How would I formulate a display filter like mentioned above, so that in the display window only those lines show up that contain (for example) "microsoft" in the "Destination" string? 
 
Preview: (hide)
 
 
 
 
          
 
Comments
What is "Destination", a specific field in a specific protocol or a column?
grahamb gravatar imagegrahamb (
    
        Jan 24 '4
    )
Can you update the question with the output of wireshark -v or Help->About Wireshark:Wireshark.


Filtering on columns is a recent addition to Wireshark:
10513: epan: Register columns fields and make them filterable (dynamic version)

_ws.col.def_dst contains "msn.com" work with The Ultimate PCAP and Wireshark Version 4.2.2 (v4.2.2-0-g404592842786).
Chuckc gravatar imageChuckc (
    
        Jan 24 '4
    )
add a comment