I would like, not only to see the packets that have a specified pattern (filter like "udp contains XX:YY:ZZ"), but also to know : How many times i have the pattern in the whole whire shark capture? Becouse, one pattern could be found more than one time in one packet. Any idea? Thanks a lot E. asked 01 Oct '12, 02:30  ebsws |
One Answer:
I think Wireshark will not be able to count multiple filter hits in one packet for you, it will only show each packet that has the pattern at least once. You could use the Search function to find all patterns manually by invoking the search until nothing else is found - but that can be a very robotic task - maybe the command line heroes have an idea how to do this in a faster way :-) answered 01 Oct '12, 03:57  Jasper ♦♦ |
