diff options
| author | Peter Wu <peter@lekensteyn.nl> | 2018-04-25 12:09:15 +0200 |
|---|---|---|
| committer | Anders Broman <a.broman58@gmail.com> | 2018-04-25 19:57:15 +0000 |
| commit | e39a30b691a02d1939a50c667b2a83634fb25ceb (patch) | |
| tree | 6f03b6551207cdbff357f803e4beef8f2aa4f1b5 /doc | |
| parent | 0a0cb440248c3af3c35354a8cf4135e5fced5ada (diff) | |
Document "len" and "count" in wireshark-filter(4) and WSUG
Add missing section on display filter functions to WSUG and make it
consistent with the wireshark-filter(4) manual. "count" was added in
Wireshark 1.12 (bug 9480). "len" was added in Wireshark 1.6.x.
"size" (added in 1.8.x) is not documented since it works like "len",
except that it is not limited to strings and byte arrays. I think that
"len" should be extended to other types while removing "size".
Change-Id: I2c8e2b4a11f007de7852a797bed971af86840b47
Reviewed-on: https://code.wireshark.org/review/27146
Petri-Dish: Peter Wu <peter@lekensteyn.nl>
Tested-by: Petri Dish Buildbot
Reviewed-by: Anders Broman <a.broman58@gmail.com>
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/wireshark-filter.pod | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/doc/wireshark-filter.pod b/doc/wireshark-filter.pod index c54e4ca353..adffef2aab 100644 --- a/doc/wireshark-filter.pod +++ b/doc/wireshark-filter.pod @@ -96,6 +96,8 @@ The filter language has the following functions: upper(string-field) - converts a string field to uppercase lower(string-field) - converts a string field to lowercase + len(field) - returns the byte length of a string or bytes field + count(field) - returns the number of field occurrences in a frame upper() and lower() are useful for performing case-insensitive string comparisons. For example: |