On Sat, Apr 19, 2014 at 12:48 PM, Guy Harris wrote:
>
> On Apr 19, 2014, at 12:24 PM, Richard Sharpe
> wrote:
>
>> One think I would like to be able to do is "Show me all the SMB2
>> requests where the smb2.flags.is_response == true && smb2.nt_status !=
>> NT_STATUS_SUCCESS"
>
> Presumably you m
On Apr 19, 2014, at 3:48 PM, Guy Harris wrote:
> So perhaps there should be a way to have a display filter show related
> packets in addition to packets that match the packet-matching expression.
>
> However, there are multiple flavors of "related", and sometimes you might
> want the correspo
