Wireshark · Ethereal-dev: [Ethereal-dev] Feature request: filter merging/stacking

["Ph. Marek" <marek@xxxxxxxxxx>]

Hi everybody,

I'd like to post a feature request: filter merging (or stacking, ...)

What I'd like to do is incremently refine the display filter. So I filter
out what doesn't interest me, then the next few packets, and so on - but
the filter gets VERY long this way AND it's hard to work this way.

Currently I click on a tcpip conversation, say follow tcp stream, close the
window, and do a "!(" in front and a ")" at the back to hide this
conversation. fine so far. but now that I want some other filter rules I
have to put them manually inside the brackets and so on.

So I request a feature to say "based on the current display filter, do
another filter after this" - to stack filters, so to say.
And, if we're on the way, another point "hide tcp stream" would be nice, too.


Any other ideas?


Regards,

Phil