Hi.
While using this excellent tool (SnifferTM has only the expert to really
compete i feel!) i came up with even more:
give me a "BACK" and "FORWARD" button for the filterstring-history like
in the webbrowsers, not just the drop down list. add the browser-like
mouse-thumb-buttons for quick navigation.
Maybe clear the filter-box when closing the current / opening a new
trace to start out fresh? Here in my training class it is annoying to
have the old filter on the new trace. Don't know about real life yet..
Please decide.
why is the filter-string-box not resizeable? A simple follow TCP stream
will already be bigger - i guess a lot of people asked that already, so:
sorry ;)
can i have a separate font for hex window (all windows?) ? it takes up
too much space for being of too little interest for me (using 2nd
layout, hex lower right, eating away details). i would not mind setting
it to a barely readable fontsize to gain space and on the downside have
to lean forward to the screen if i really wanted to read something
hex-ish in every 10th packet.
filter on the protocol-dissector-detail when doubleclicking it - as if
using "apply filter as -> selected". eg. go to SMB multiplex-id,
doubleclick it to filter on smb.mid == 0F00. the executed action should
be configurable, so you can turn it off or set it to "prepare
as/AND/not" if you like. Be a bit inspired by the windows-explorer and
modify the cursor and the action when holding shift/+ctrl/+alt when
doubleclicking to represent and/not/or/add/whatever.
add a button on the searchbar that says "Marked" which filters with
"frame.marked == 1" to zoom in on packets that you found interesting
while browsing through the trace before.
Put separators in the Y-axis-scale of the IOgraph so you get 1,000 /
1,000,000 (get separator from OS?) etc. Counting zeros at that size is
ugly.
Looking forward to hearing from you :)
Chris
_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev