Guy Harris wrote:
>
> I asked this a while ago, and I don't think any need for it was
> mentioned except as a way to update the display when doing a capture
> with the "-F" flag.
>
> "-F" is now gone, replaced by "-S", which updates the display
> automatically (and which can be selected from the GUI as well); is there
> any more use for "File/Reload"?
I don't know if this is related, but I ran into a bit of weirdness in
this area. I was using Ethereal to view tcpdump packet dumps. I'd use
Ethereal to filter the raw dumps down to something readable, then try to
change the filter, but it wouldn't work. I'm hazy on the details, but
it either filtered on the subset of packets created by the first filter
operation, or it failed to filter properly. I had to exit and restart
the program every time in order to change the filter.
Either the filtering logic needs to be changed so that filtering doesn't
throw away the program's memory of non-matching packets, or File |
Reload could have the side-effect of clearing all the filters. The
latter might actually be better because then you could "stack" filters
by filtering on one criterion, and then filtering again on the subset
created by the first filter. On the other hand, you can already do that
by using Boolean ANDs in the filter.
(Yes, I'm raving. It's 6am and the caffeine hasn't kicked in yet.)
--
= Warren Young: www.cyberport.com/~tangent | Yesterday it worked.
= ICBM Address: 36.8274040N, 108.0204086W, | Today it is not working.
= alt. 1714m | Windows is like that.
