| Bug ID |
10660
|
| Summary |
REQUEST: Open filter results in new window
|
| Product |
Wireshark
|
| Version |
unspecified
|
| Hardware |
All
|
| OS |
All
|
| Status |
UNCONFIRMED
|
| Severity |
Enhancement
|
| Priority |
Low
|
| Component |
GTK+ UI
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Build Information:
Version 1.12.1 (v1.12.1-0-g01b65bf from master-1.12)
Copyright 1998-2014 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with GTK+ 2.24.23, with Cairo 1.10.2, with Pango 1.34.0, with
GLib 2.38.0, with WinPcap (4_1_3), with libz 1.2.5, with SMI 0.4.8, with c-ares
1.9.1, with Lua 5.2, without Python, with GnuTLS 3.1.22, with Gcrypt 1.6.0,
without Kerberos, with GeoIP, with PortAudio V19-devel (built Sep 16 2014),
with
AirPcap.
Running on 64-bit Windows 7 Service Pack 1, build 7601, with WinPcap version
4.1.3 (packet.dll version 4.1.0.2980), based on libpcap version 1.0 branch
1_0_rel0b (20091008), GnuTLS 3.1.22, Gcrypt 1.6.0, without AirPcap.
Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz, with 3970MB of physical
memory.
Built using Microsoft Visual C++ 10.0 build 40219
Wireshark is Open Source Software released under the GNU General Public
License.
Check the man page and http://www.wireshark.org for more information.
--
This is not a bug, but a request really if a feature could be added to
Wireshark.
Whenever I'm working in it, my flow is generally to eradicate the noise and
then move steadily closer to the traffic that I would be most interested in.
One could argue that it's possible to start defining the interesting traffic
and just zoom in on it, but there's possibility of losing something of value in
that.
For this to work, I have to constantly tweak the display filter and by the time
I get to my traffic of interest, my display filter is a mile long, and to get
further specific, I have to add on to that too.
Would it be possible for Wireshark to allow to open the results of a display
filter in a new tab or window, where only the packets that match the filter are
shown? For example if I add the noise to a display filter like "!arp &&
!multicast && !ipv6" can a new window show just what the results of that filter
would be?
Wireshark is an awesome product and I thank you from the bottom of my heart for
making it even better every day!
You are receiving this mail because:
- You are watching all bug changes.