This is not yet possible, you have to load the capture bring up the
conversations window, select it, right click and apply as filter to
filter out the conversation.
However, since the conversation handling was enhanced semi-recently to
keep track of when a conversation was opened/created and when it is
closed it might be useful to add
these fields to the decode pane to make it easier to filter for conversations ,
something like :
- [TCP Conversation: 0x12345678]
[TCP conversation opened in frame : 55]
[TCP conversation closed in frame : 77]
[TCP conversation length : 0.55 seconds] (time delta
between frame 77 and 55)
added to the tree.
This would be useful.
On 5/9/05, Javier Acuña <javier.acuna@xxxxxxxxxx> wrote:
>
>
> Is it possible to apply a filter to a conversation?
>
> I know that applying filter first, then watch conversation is possible, but I'm interested in the other way around.
>
> Best Regards
>
> Javier Acuña
>
> ________________________________________________________________
>
> Mensaje enviado desde el Servicio Webmail del Dominio sixbell.cl
>
> _____________________________
> La informacion contenida en esta transmision es confidencial, y no puede ser usada por otras personas que su(s) destinatario(s). El uso no autorizado de la informacion contenida en esta transmision puede ser sancionado. Si ha recibido esta transmision por error, por favor destruyala y notifique al remitente telefonicamente, con cobro revertido o via e-mail.
>
> The information contained in this transmission is privileged, and may not be used by any person other than its addressee(s). Unauthorized use of the information contained in this transmission may be punished by law. If received in error, please destroy and notify the sender by calling collect or by e-mail.
> _____________________________
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>