Ethereal

Re: [Ethereal-users] Filter rule deping on privious packet?
Google
 
Web Ethereal.com

Home | Introduction | Documentation | Lists | FAQ | Development | Wiki | Bugs

Ethereal-users: March 2006


Guenther Lackner wrote:

I need a filter rule which filters out a packet depending if the
priviously captured packet does not contain a certain destination address.

Is there a possibility to do this with the ethereal filter rules?

No - the Ethereal filter language is stateless, and an expression can only test the values in a single packet, not values in previous packets. (The same is true of the libpcap/WinPcap capture filter language.)

Powered by MHonArc 2.6.10