Hi ethereal experts,
how can I (display) filter on packets which contain an arbitrary string anywhere inside the packet?
From the list of fields I can guess that I need to use the ´data´
field, but I cannot fgure out how to express the rest. The substring functions seem to require me specifying known locations, but as yet I have no idea where in the packet mystring will turn up.
IOW, I'm looking for something like $date =~ /mystring/;
Any hints are appreciated.
mk -- Mathias Koerber mathias@xxxxxxxxxxx
Powered by MHonArc 2.6.10