Ethereal-dev: Re: [ethereal-dev] capture files that crash 0.8.8

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Wed, 17 May 2000 01:36:19 -0700
On Tue, May 16, 2000 at 07:32:51PM -0700, Don wrote:
> Yes, I don't want the display filter changed; but how about the two operations
> being 1) "set filter to this packet's stream" (probably belongs in the Filter
> menu), and 2) open a window showing this stream's contents, except that the
> follow window would have it's own filter, as below.

Why give the follow window a filter at all?

> That way the original packet display filter rule remains intact (since on a
> large capture file it may take a while to reprocess the original filter rule).

In my proposal, "Follow TCP Stream" wouldn't, as noted, filter the
display:

> one of which collects the stream data into a "Follow TCP Stream" window
> but doesn't filter the display,

and thus would leave the display filter intact.

At some point "Follow TCP Stream" and "Filter TCP Stream" might not use
a display filter expression at all; instead, they might use the
conversation code.