This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

search for a pattern of consecutive packets

0

Hi,

I'm trying to find a pattern of multiple consecutive RTS packets. mainly ~10 or more without CTS following them. is there a way to find such a pattern?

Thanks!

asked 01 Feb '16, 05:17

HananB's gravatar image

HananB
11113
accept rate: 0%


One Answer:

0

Packet dependency filtering isn't possible. The only exception is when Wireshark does the relationship calculation for you and adds meta info to the packets. E.g. if the RTS packets have a field telling you where the related CTS packet is, you could filter on that. That way you'd find all that have a CTS, and then negate the filter to get the opposite.

See also https://blog.packet-foo.com/2015/03/advanced-display-filtering/

answered 01 Feb '16, 05:46

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

what a drag... Thanks for the answer though

(01 Feb '16, 05:52) HananB

It might be a nice feature - and might be implementable using MATE - but it's more complicated than doing "memory-free" filtering.

(01 Feb '16, 18:34) Guy Harris ♦♦