Guy Harris
changed
bug 9863
What |
Removed |
Added |
Status |
UNCONFIRMED
|
RESOLVED
|
Hardware |
x86-64
|
All
|
Resolution |
---
|
NOTABUG
|
OS |
Mac OS X 10.9
|
All
|
Comment # 5
on bug 9863
from Guy Harris
Yes, the "read filter" is a way to pre-filter packets when reading the file;
it's been a feature of Wireshark for several major releases.
We also support changing the settings of various name resolution settings; the
one of most interest is probably network-layer name resolution, as file A
might, for example, happen to contain IP addresses that would be mis-resolved
(because they're in one of the RFC 1918 private ranges, and the capture came
from a different site with assignments of addresses in that range separate from
yours) or that might cause slow resolution of names (due to unreachable DNS
servers), so you'd turn network-layer resolution off, whereas file B might be a
local capture where you want that name resolution turned on. That has also
been a feature of Wirehark for several major releases.
I.e., this is not a bug or even a new feature; it's just continuing to support
an *old* feature in the Qt version.
You are receiving this mail because:
- You are watching all bug changes.