Ethereal

[ethereal-dev] filter question
Google
 
Web Ethereal.com

Home | Introduction | Documentation | Lists | FAQ | Development | Wiki | Bugs

Ethereal-dev: August 2000


Hello!

I have attached a tcpdump file with one NFS and one NLM packet. Both are
related to the same file (file handle). If I try to "Match Selected" in the
2nd (NLM) packet for
NLM/object/file number/inode
I get the display filter expression 
"nfs.fh.fn == 225737"
but this filter finds only the 1st (NFS) packet.

Does this mean, that the first part of a variable name "nfs.fh.fn" -> "nfs"
leads to packets with this protocol only?

In fact I implemeted the file handle parse code only for this kind of
application. The NFS mount process is another example, where the same file
handle comes in different protocols but is always parsed and included in the
tree with the same function and the same names (nfs.fh....).

I never looked a the display filter code, so I have no idea where to search for
this problem.

Uwe

Attachment: fn.gz
Description: application/gunzip


Powered by MHonArc 2.6.10