Martin Regner wrote:
Seems to be something that could be useful. Will the display filter string not be too long after a while
if you apply this several times for a certain capture? I don't know how long the filter strings can be.
As far as I can see in the code, the limitation is available memory to
allocate.
Personally, I've experimented upto about 10.
I'm mainly looking for a possibility to see a summary of all TCP streams (and UDP and ...) in a separate window and to press a filter button to filter out a specific connection (or maybe even a combination of streams), similar to the functionality "Connections" in Packetyzer (www.packetyzer.com
In Tethereal there is the IO-Users functionality ("TopTalkers").
I was thinking of looking how difficult it is to port this to Ethereal and maybe add some filtering
buttons and so on. However I don't think I will have so much time for that in the next two weeks or so
and I'm also new to GTK.
That all sounds useful. I also have no time available right now. I
added the 'Filter out... ' button to
save myself some, & I just wanted to share it with anyone else that
might find it useful.
e.