Ethereal-users: Re: [Ethereal-users] small feature request ...

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Jon Baer" <ethereal@xxxxxxxxxxx>
Date: Sat, 21 Jun 2003 02:36:18 -0700
as a follow up basically what id *really* like to do is right click on the
packet window, highlight the hex, right click and copy (so i can import the
data into ids ruleset).  but saving the packet to hex is just as fine.

pgp key: http://www.jonbaer.net/jonbaer.asc
fingerprint: F438 A47E C45E 8B27 F68C 1F9B 41DB DB8B 9A0C AF47


----- Original Message ----- 
From: "Guy Harris" <gharris@xxxxxxxxx>
To: "Jon Baer" <ethereal@xxxxxxxxxxx>
Cc: <ethereal-users@xxxxxxxxxxxx>
Sent: Saturday, June 21, 2003 2:25 AM
Subject: Re: [Ethereal-users] small feature request ...


> On Sat, Jun 21, 2003 at 01:17:20AM -0700, Jon Baer wrote:
> > id really like the abilty to have "Save Packet(s)..." as an option ...
> > (instead of just a print to ethereal.out) ...
>
> What do you mean by "Save Packet(s)"? I would interpret that as being
> completely different from a print to a file - I'd interpret it as being
> the same as "Save As...", perhaps with the "Save only packets currently
> being displayed" or "Save only marked packets" option if by "Packet(s)"
> you mean "only some of the packets in the capture, not all of them".
>
> If by "Save Packet(s)" you mean "save to a capture file", what do you
> need that "Save As..." doesn't provide?
>
> If you mean "print to a file", it already has "Print only marked
> packets" in "Print..." (although it's called "Suppress unmarked frames"
> - perhaps it should be called "Print only marked frames" for consistency
> with "Save As..."), and it never prints packets that aren't being
> displayed (perhaps it should work like "Save As..." there as well).
>