Wireshark-bugs: [Wireshark-bugs] [Bug 11357] New: set operations for display filters

Date: Mon, 13 Jul 2015 12:58:02 +0000
Bug ID 11357
Summary set operations for display filters
Product Wireshark
Version unspecified
Hardware All
OS All
Status UNCONFIRMED
Severity Enhancement
Priority Low
Component GTK+ UI
Assignee [email protected]
Reporter [email protected]

Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
I frequently had the use case of filtering out multiple tcp.streams, which led
to cumbersome display filter strings like "tcp.stream eq 0 or tcp.stream eq 2
or tcp.stream eq 468 ..."

To ease this, a set operator might be useful, like "tcp.stream in
{0,2,468,324}". Maybe this could be also done with filter macros, if there's a
possibility to pass & use arbitrary-length vectors to them


You are receiving this mail because:
  • You are watching all bug changes.