https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5279
--- Comment #3 from Chris Maynard <christopher.maynard@xxxxxxxxx> 2010-10-06 10:26:58 PDT ---
(In reply to comment #1)
> There is a nice way of doing what you want already. After marking all the
> frames you *don't* want, use the display filter "frame.marked==0", then go to
> "Save as..." and write all displayed packets to file.
>
> Does that suit your need? I'm a bit hesitant about adding a lot of options to
> the "Save as...". I can see the request for "Save undisplayed packets" coming
> too ;-)
Thanks. That's not as nice but it will work. Not as nice because it means
having to refilter all the packets, which can take awhile with big capture
files. But no problem; I understand not wanting to go down the path of adding
every conceivable permutation of "Save As ..." options there are.
(In reply to comment #2)
> I do see use in a "Inverse Marked Frames" option, but then I would want to skip
> the toggle from "Mark All Frames"
>
> That would result in:
>
> - Mark Packet (toggle)
> - Invert Marked/Unmarked (toggle)
> - Mark All packets
> - Unmark All packets
>
Yeah, I think the basic problem now is with the "Mark All Displayed Packets
(toggle)", as it doesn't really do what it implies it does. I think it would
be a good idea to make these changes so that the new "Invert Marked/Unmarked
(toggle)" replaces it and has the effect of marking all unmarked packets and
unmarking all marked packets. That is the definition of toggle to me.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.