Ask Your Question

rickhg12hs's profile - activity

2022-12-08 17:06:38 +0000 received badge  Famous Question (source)
2022-07-30 12:47:47 +0000 received badge  Notable Question (source)
2022-07-30 12:47:47 +0000 received badge  Popular Question (source)
2022-01-02 12:50:35 +0000 marked best answer Can display filters have wildcards for field name?

I'd like to filter all the packets with a wildcard for the field name, for example, something like *addr* would filter all packets such that any packet that had addr in a field name would be displayed. Field names that might be included: ip.addr, ipv6.addr, eth.addr, etc. addr is just an example, I'd like to use other field name wildcard filters too. Other example desired field name filters might be *time*, *crypt*, *antenna*, *spatial*, or *connection*.

N.B.: This question is about how to get Wireshark to filter on a field name that has wildcards. This question is not about any specific communications prorocol.

2022-01-02 12:50:35 +0000 received badge  Scholar (source)
2022-01-02 12:48:11 +0000 commented question Does anybody know why WireShark reveals encrypted VPN Traffic?

There are many levels where encryption can be used, so just because there is TCP doesn't mean it isn't encrypted (though

2021-12-31 17:33:02 +0000 commented answer invalid json request to tshark

If you want to transform multiline json to single line json, you could use jq. $ cat info.json { "jsonrpc": "2.0"

2021-12-31 17:32:19 +0000 commented answer invalid json request to tshark

If you want to transform multiline json to single line json, you could use jq. $ cat info.json { "jsonrpc": "2.0"

2021-12-31 17:31:48 +0000 commented answer invalid json request to tshark

If you want to transform multiline json to single line json, you could use jq. ``` $ cat info.json { "jsonrpc": "2.

2021-12-31 17:31:31 +0000 commented answer invalid json request to tshark

If you want to transform multiline json to single line json, you could use jq. ```bash $ cat info.json { "jsonrpc":

2021-12-29 17:18:53 +0000 commented answer Can display filters have wildcards for field name?

I would upvote if I had enough points. Yes this is possible but I was hoping to reduce the number of steps. In the gen

2021-12-29 17:17:05 +0000 commented answer Can display filters have wildcards for field name?

I would upvote if I had enough points. Yes this is possible but I was hoping to reduce the number of steps. In the gen

2021-12-29 13:39:20 +0000 received badge  Organizer (source)
2021-12-29 13:33:59 +0000 received badge  Editor (source)
2021-12-29 13:33:59 +0000 edited question Can display filters have wildcards for field name?

Can display filters have wildcards for field name? I'd like to filter all the packets with a wildcard for the field name

2021-12-29 13:23:44 +0000 commented answer Can display filters have wildcards for field name?

As a counter-example to your ideas about addr everywhere, a Cisco NetFlow/IPFIX capture need not have addr for every pac

2021-12-29 13:18:33 +0000 commented answer Can display filters have wildcards for field name?

I guess I did not emphasize enough that this isn't about addr but about any filter for field names. If you need another

2021-12-29 03:33:28 +0000 asked a question Can display filters have wildcards for field name?

Can display filters have wildcards for field name? I'd like to filter all the packets with a wildcard for the field name