First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Please allow names for values of fields in filters if the values have names

  • retag add tags

is there any way (maybe via an add-on) to make wireshark allow the use of mnemonic values for capture/display filters

eg dns.flags.opcode == 4 is for NOTIFY packets

but one has to remember each of these values

It would be nice if I could filter on

dns.flags.opcode == NOTIFY

or such

This would be even more helpful

Mathias's avatar
1
Mathias
asked 2023-07-28 10:44:56 +0000
Guy Harris's avatar
19.9k
Guy Harris
updated 2023-07-28 20:40:31 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

2 Answers

0

Enhancement requests go here.

grahamb's avatar
23.8k
grahamb
answered 2023-07-28 11:08:40 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Similar to what was done for 18704: Display Filter dns.qry.type with types rather than values

Chuckc's avatar Chuckc (2023-07-28 11:42:58 +0000) edit
more
  • delete
add a comment see more comments
0

You can also use the Analyze -> Display Filter Expression feature. For example:

image description

cmaynard's avatar
11.1k
cmaynard
answered 2023-07-28 14:51:44 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer