http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2578
Summary: snapshot feature: apply filter upon previous displayed
packets only
Product: Wireshark
Version: unspecified
Platform: PC
OS/Version: Linux
Status: NEW
Severity: Enhancement
Priority: Low
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: yamisoe@xxxxxxxxx
Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
I want to add a small but useful feature called 'snapshot' into wireshark.
With this feature, user can apply a display filter on packets that are
displayed previously.
For example, first user filters out 'UDP' packets, and saves displayed packets
to a snapshot called 'UDP' (NOTE: 'UDP' packets are not saved to disk, and the
implementation induces little memory overhead).
Later when user want to filter out all 'DNS' packets, since 'DNS' runs upon
'UDP', the user can safely skip all non-UDP packets. To put it another way, the
user can 'search' DNS packets in snapshot 'UDP' only.
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.