Ask Your Question

Revision history [back]

Can display filters have wildcards for field name?

I'd like to filter all the packets with a wildcard for the field name, for example, something like *addr* would filter all packets such that any packet that had addr in a field name would be displayed. Field names that might be included: ip.addr, ipv6.addr, eth.addr, etc. addr is just an example, I'd like to use other field name wildcard filters too.

Can display filters have wildcards for field name?

I'd like to filter all the packets with a wildcard for the field name, for example, something like *addr* would filter all packets such that any packet that had addr in a field name would be displayed. Field names that might be included: ip.addr, ipv6.addr, eth.addr, etc. addr is just an example, I'd like to use other field name wildcard filters too.too. Other example desired field name filters might be *time*, *crypt*, *antenna*, *spatial*, or *connection*.

N.B.: This question is about how to get Wireshark to filter on a field name that has wildcards. This question is not about any specific communications prorocol.

Can display filters have wildcards for field name?

I'd like to filter all the packets with a wildcard for the field name, for example, something like *addr* would filter all packets such that any packet that had addr in a field name would be displayed. Field names that might be included: ip.addr, ipv6.addr, eth.addr, etc. addr is just an example, I'd like to use other field name wildcard filters too. Other example desired field name filters might be *time*, *crypt*, *antenna*, *spatial*, or *connection*.

N.B.: This question is about how to get Wireshark to filter on a field name that has wildcards. This question is not about any specific communications prorocol.