Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Can't filter on packet fields and higher-level data #66

Open
thearossman opened this issue Oct 18, 2024 · 0 comments
Open

Can't filter on packet fields and higher-level data #66

thearossman opened this issue Oct 18, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@thearossman
Copy link
Collaborator

Retina currently does not support filtering for packets if the specified filter requires both (1) fields that are only available in packets and (2) application-layer data.

For example, you cannot filter for "tls packets that are larger than X" or "http SYN packets for a Mozilla user-agent".

Five-tuple fields, which are constant throughout the connection, are an exception to this rule.
@thearossman thearossman added the enhancement New feature or request label Oct 18, 2024
@thearossman thearossman mentioned this issue Nov 10, 2024
Merged
thearossman added a commit that referenced this issue Nov 11, 2024
@thearossman
Merge pull request #70 from thearossman/main
b182fd7 
Add error for #66; clean up packet filter generation code
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request
Milestone
No milestone
Development

No branches or pull requests
1 participant
@thearossman