How to do it...

  1. In order to configure a macro, you give it a name and you fill in the textbox with the filter string.
  2. In order to activate the macro, you simply write the following:
$(macro_name:parameter1;paramater2;parameter3 ...) 
  1. Let's configure a simple filter name, test01, that takes the following parameters as values:
ip.src == <value> and 
tcp.dstport == <value> 
  1. This will be a filter that looks for packets from a specific source network that goes out to an HTTP port.

A macro that takes these two parameters would be as follows:

ip.src==$1 && tcp.dstport==$2  
  1. Now, in order to get the filter results for parameters we do the following:
ip.src == 10.0.0.4 and 
tcp.dstport == 80 
  1. We should write the string in the display window bar as follows:
${test01:10.0.0.4;80} 
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
3.135.188.121