Wireshark-bugs: [Wireshark-bugs] [Bug 9607] TFShark (Terminal FileShark)

Date: Thu, 02 Jan 2014 07:49:17 +0000

Comment # 17 on bug 9607 from
I propose to let well alone. My idea is just simple:

1. Packet is one record; file is one record too. (you can any time hide Packet
List pane) - so need to implementing one of your idea to provide contiguous
record for files.

2. Add "field filter" into "Packet Details", so you are able to find
interesting field - useful for file, file-with records (like pcap, etc.) and...
packets - for example protocol "btsdp" - there is a lot of fields and try to
find interesting in tree is waste of time.

3. You can also provide new API to provide ability to add new "packet" to the
list (for example pcap file may use that), new_packet(new_tvb, encap_type,
headers)

By the way: maybe better is treat Wireshark/Fileshark/Omnivoroushark as reader
and writer too. Maybe there will be easier to implement feature like "Packet
Editor" (if we have dissected all fields, so it is easier to modify everything)


You are receiving this mail because:
  • You are watching all bug changes.