First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

How can I find the second and subsequent occurrences of a string in a packet?

  • retag add tags

e.g. the string "message" occurs multiple times within multiple packets in a capture. But when I use the Find Next function it skips the 2nd and subsequent occurrences of the string in a specific packet and instead skips to the next packet that contains the string.

mckeague's avatar
1
mckeague
asked 2021-11-09 17:07:35 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Can you explain more how this would be used?
There is a "Find:" box when Following Protocol Streams. Would that work?
Or does the “Packet Bytes” Pane need it's own search function either in a "Find:" box or on the context pop-up menu?

Chuckc's avatar Chuckc (2021-11-10 04:32:12 +0000) edit
more
  • delete

I'm examining 5G logs and need to find specific parameters that may appear in multiple messages. Often its HTTP2 messaging between multiple network functions. Multiple streams are involved.

mckeague's avatar mckeague (2021-11-15 21:12:59 +0000) edit
more
  • delete
add a comment see more comments

1 Answer

0

Unfortunately, that's the way the "Find Next" feature works; it finds the next packet that matches, not the next occurrence, which might very well be within the same packet.

See Issue 11269 - Find Packet/Find Next finds only the first match in the packet.

cmaynard's avatar
11.1k
cmaynard
answered 2021-11-10 03:03:24 +0000
edit flag offensive 0 remove flag delete link
more

Comments

thanks Christopher.

mckeague's avatar mckeague (2021-11-15 21:18:35 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer