Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 2578] New: snapshot feature: apply filter upon previous displayed packets only

[bugzilla-daemon@xxxxxxxxxxxxx]

http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2578

           Summary: snapshot feature: apply filter upon previous displayed
                    packets only
           Product: Wireshark
           Version: unspecified
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: yamisoe@xxxxxxxxx


Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
I want to add a small but useful feature called 'snapshot' into wireshark.

With this feature, user can apply a display filter on packets that are
displayed previously.

For example, first user filters out 'UDP' packets, and saves displayed packets
to a snapshot called 'UDP' (NOTE: 'UDP' packets are not saved to disk, and the
implementation induces little memory overhead). 

Later when user want to filter out all 'DNS' packets, since 'DNS' runs upon
'UDP', the user can safely skip all non-UDP packets. To put it another way, the
user can 'search' DNS packets in snapshot 'UDP' only.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.