Which is the simplest method to analyze the output and find if a block of data is present. I am working on wireshark traces analysis and would like to check if a block of data is present in the trace. I tried adding analysis rule to check line by line but it is tedious when the number of lines increase. Is there a better way out?
I was thinking of block response but how to i evaluate presense of a block in the output. I need no data extraction, just a yes or no kind off analysis.