On Wed, 18 Feb 2004, Ulf Lamping wrote:
> Olivier Biot wrote:
>
> >Hi list,
> >
> >I'd like to implement packet deletion. for many things deeting packets
> >is *very* similar to marking and unmarking packets. I however have
> >some questions, so I list some statements below:
> >
> >1. If I delete a marked packet, I should unmark it too.
> >2. All (context) menu items on a deleted packet must be disabled,
> >except for undeletion.
> >3. If a deleted packet is selected, its dissection tree must not be
> >shown.
> >4. Deleting packets in a capture may change the way a capture is
> >dissected. For example, if I delete a WSP redirect packet, then the
> >redirection conversation will not be built if the packets are
> >processed again.
> >5. Because of 4. we may want to have a "redissect" button be active
> >whenever we suspect something will change dissection.
> >6. Deleted packets "never" match a display filter.
> >
> >Comments are welcome!
> >
> >
> >
> What do you mean with packet deletion?
I think he means to mark them as deleted.
> Do you want to simply hide the packets, or really remove them from the
> capture file?
I don't think it will be easy to delete them from the capture file. We
will have to write the capture file out again to do this.
Regards
-----
Richard Sharpe, rsharpe[at]richardsharpe.com, rsharpe[at]samba.org,
sharpe[at]ethereal.com, http://www.richardsharpe.com