On Tue, Mar 05, 2002 at 10:03:23PM +1100, Ronnie Sahlberg wrote: > My memories from trying filtering in netmon was something really crude as > say filtering for NFS filenames that I would have to do something as easy to > use as frame[25:30]=="FooBar"
The NFS dissector in Netmon appears to be stupid - they appear to have registered the file name field as a one-byte field, rather than as a string or a byte array. The underlying mechanism for comparing fields with values *is* present in the Netmon core; the NFS dissector sucks, however.
