Comment # 2
on bug 10660
from Guy Harris
(In reply to Basti Ji from comment #0)
> This is not a bug, but a request really if a feature could be added to
> Wireshark.
Yes, Bugzilla is intended not only for bugs but feature requests, hence the
"Enhancement" type for the second part of "Importance".
> Whenever I'm working in it, my flow is generally to eradicate the noise and
> then move steadily closer to the traffic that I would be most interested in.
> One could argue that it's possible to start defining the interesting traffic
> and just zoom in on it, but there's possibility of losing something of value
> in that.
>
> For this to work, I have to constantly tweak the display filter and by the
> time I get to my traffic of interest, my display filter is a mile long, and
> to get further specific, I have to add on to that too.
>
> Would it be possible for Wireshark to allow to open the results of a display
> filter in a new tab or window, where only the packets that match the filter
> are shown? For example if I add the noise to a display filter like "!arp &&
> !multicast && !ipv6" can a new window show just what the results of that
> filter would be?
If the problem you're having is a very long display filter, I'm not sure how
this suggestion addresses that.
Is the idea that the new window would have the existing filter "baked in", so
that only what you add to it would show up in the filter text (with the actual
filter being the AND of the baked-in filter and what you type)?
Or is it that you'd be able to try adding something to the filter, and have it
show up in a new window, so that if it isn't the filter you want, you can close
the new window, go back to the old window, and try adding something else to the
filter and have *that* pop up in a new window?
You are receiving this mail because:
- You are watching all bug changes.