Search a Sequence of Bytes

Voters 42

F
C
M
R
N
K
+ 34 voters
J
J
#
K
S
R
A
M
J
M
A
A
H
D
M
Z
A
B
S
J
P
V
K
D
P
R
I
L
S
H
T
D

A
+ 2 anonymous

Open
Subscribe

R	Rei Vilo

I soûle lime to perform a search of a sequence with multiple characters or bytes.

Example: search for 0x47 0x09 sequence on an I²C frame.

21-02-2020 -

Activity Newest / Oldest

Tim

(#91744)
"In the data search, is there a way to search for a multiple packets search?"

Tim

(#90727)
"I've seen this request from several years ago (from many others), so I'm adding my vote. Seems like it should be pretty easy: I just want to search for a short stream of bytes in a serial capture, say 'AA 44 95'."

Tim

(#88723)
"We have multiple Saleae devices and sometimes we need to get pattern or some frame between hundred of UART frames but we can't due your application have only searching by Byte not pattern, so please make sure next update have this feature"

Tim

(#86582)
"allowing regular expressions as search string would be *great* for some difficult operations"

Mark

You can search for a sequence of I2C, SPI, or Serial bytes, in HEX, using the "Concatenator" HLA from the marketplace. Once added, make sure you adjust the packet timeout to suite your data (the default may be too short) and change the display format to HEX.

Then, you can search the protocol results for the sequence you need. See the screenshot for an example.

David

Except that the published "Concatenator" extension still has outstanding bugs reported 3+ years old that cause fatal TypeErrors when it starts parsing SPI data....

Tim

Ah... sorry about that... you're right, it looks like the original developer hasn't updated it since then. The "Concatenator" HLA is a fork of Mark's original "Text Messages" HLA seemingly to add support for Hex output, since Mark's "Text Messages" HLA has support for ASCII only.

It looks like the "Concatenator" HLA has some kind of conflict with a data type. Could the "Text Messages" HLA work out for you?

If not, we could look into suggesting a solution for the "Concatenator" HLA, or perhaps we could implement the same functionality into Mark's "Text Messages" HLA.

Please could we have the ability to search multiple data values, e.g. search for a sequence of bytes in the serial data, if you look at the attached packet I might want to find all the packets with "0x03 0x21 0x1F 0x00".
Or even better with anchors (like grep) for 'starting with' or 'ends with', Or filter like WireShark (or Lua scripting like WireShark!)
I know I can capture, export to csv, write a complicated grep script - but the benefit of a lovely GUI is to make it simple?

Luca

string search in Async Serial log could be a big functionality indeed

Tim

(#76630)
"Lets say you have a specific string in the output of the terminal and you want to know where in the level window it was transmitted, it is not possible to click on the string or to find it in the data table. You can only search for single charakters in the data table serial decoder"

Tim

Example use cases for sequence search here:
discuss.saleae.com/t/usb-ls-and-fs-analyzer-been-enhanced/1222/2

Tim

discuss.saleae.com/t/how-can-i-find-a-sequence-in-the-spi-parser-beside-the-trace/1217
"Hi,
I took a trace from SPI lines and I want to find a specific sequence in the trace. I saw a way to find one byte but didn’t find an option to find few bytes togheter:"

Tim

Merged with: Multi-byte search or filter in analyzer data

Stuart Rubin

Add the ability to search for multiple byte sequences in the SPI (and other) analyzers. It is quite common to need to search or filter for a SPI command sequence, like 0x9F 0x2B 0x3C (not just 0x9F). Even better would be search a combination of commands (MOSI) and responses (MISO).

Terrence

Example: read [0x14], 0xA1+ack 0x00+ack 0xA2+ack 0x00+nak
if I want search "0xA1 0x00" string , can do it ?

Tim

Merged with: How to search I2C string

Tim

Good question. Unfortunately, sequential search (i.e. "0xA1 0x00") are not possible right now.
ideas.saleae.com/b/feature-requests/advanced-search/

Right now, only individual entries can be searched (i.e. "0xA1" or "0x00", but not together or in sequence). I went ahead and merged this with the idea post above so that we can track your need for this as well.

Tim

(#60202)
"Analysing Ascii based UART protocols.
Searching for a single character doesnt help here very much."

Tim

(#59138)
"if I want to find a sequence of bytes: 0x13 0x07 0x00, how would I enter that in the search bar"

Kazimierz

I would love to be able to search by sequence of bytes, or just text in the decoded data. I am often analyzing GSM modem AT protocol, which is mostly text over UART, and I would like to be able to find one specific command, like '+QIRD=0,1,5rn'. Currently the data window allows searching for single byte only in UART communications, which does not help at all.

Neel

Status changed to: Open

David

I would add that the same search routine could be also be used for more advanced triggering. Or should I add that as a separate suggested feature?

Mark

We're working on trigger on protocol now!

Bartm

And search in the Terminal frame.

Mark

Could you suggest this as a new idea?

Saleae

Status changed to: Planned