Wireshark-bugs: [Wireshark-bugs] [Bug 9048] two pass analysis does not show any packets with som

Date: Tue, 20 Aug 2013 17:10:20 +0000

Comment # 7 on bug 9048 from
(In reply to comment #4)
> Wait, no, this patch breaks combining -w and -Y: if you are writing the
> output to another capture (with -w) and have a display filter (with -Y) then
> the behaviour with/without -2 is different:
> - without -2 all frames would be written
> - with -2 only frames passing -Y would be written
> 
> I think -Y should affect -w (so that you can save only requests that have a
> response, for example). So maybe process_packet needs to return three-state
> enum (FAILED_READ_FILTER, FAILED_DISPLAY_FILTER, PASSED_BOTH)?

I'd rather save all frames, like wireshark 'File -> Save as' does.

new option: --write-displayed ?


You are receiving this mail because:
  • You are watching all bug changes.