Hi, I'm trying to find a pattern of multiple consecutive RTS packets. mainly ~10 or more without CTS following them. is there a way to find such a pattern? Thanks! asked 01 Feb '16, 05:17  HananB |
One Answer:
Packet dependency filtering isn't possible. The only exception is when Wireshark does the relationship calculation for you and adds meta info to the packets. E.g. if the RTS packets have a field telling you where the related CTS packet is, you could filter on that. That way you'd find all that have a CTS, and then negate the filter to get the opposite. See also https://blog.packet-foo.com/2015/03/advanced-display-filtering/ answered 01 Feb '16, 05:46  Jasper ♦♦ |
what a drag... Thanks for the answer though
It might be a nice feature - and might be implementable using MATE - but it's more complicated than doing "memory-free" filtering.