Chuck Craft
“Those who can, do; those who can’t, support the doers.”
After a (successful?, satisfying?) career in IT, Chuck spends his free time answering questions on ask.wireshark.org with occasional Commits to the Wireshark code.
Sessions
06-20
11:45
60min
Three-dimensional display filters with MATE
Chuck Craft
"MATE’s goal is to enable users to filter frames based on information extracted from related frames or information on how frames relate to each other."
Wireshark display filters are great when looking at individual packets.
MATE allows filtering using fields from more than one packet to create a filtered list of packets.
This will be a workshop format, solving a problem in steps using MATE.
In the cases where MATE needs just a little extra we will look at adding a Lua script to the solution.
Intermediate
Great Falls