ronnie sahlberg wrote:
These resolved hostnames, would it make sense to make ip.src and ip.dst into expansions and put the resolved name ip.host down there so they become visible?
Presumably the intent is to allow
ip.host contains "google"
or something such as that? (Exact matches on the host can be done with
ip.addr eq www.google.com
Powered by MHonArc 2.6.10