Wireshark mailing list archives

Re: Filter change


From: Rodrigo Guti <rgutierrez9 () gmail com>
Date: Fri, 16 Apr 2010 18:54:16 -0600

Hi,

Thanks for the reply, I am using Version 1.2.6, that bug is fixed in my
version. This is what I would like to see in my filter box, on my previous
version, after I do follow TCP stream, on the filter box, I got this:

Filter: (ip.addr eq 97.65.22.235 and ip.addr eq 10.198.16.99) and (tcp.port
eq 80 and tcp.port eq 2922)

But now, on my new code, after I do follow TCP stream, I got this:

Filter: tcp.stream eq 2

I am wondering if there is a way to get my old filter information displayed,
like the one in my previous version.

I am not having any problem with my filters, it is just how the filter is
displayed in the Filter box.

Please let me know if there is a way to modify that.

Thanks!!



2010/4/16 Guy Harris <guy () alum mit edu>


On Apr 16, 2010, at 5:24 PM, Rodrigo Guti wrote:

I am kind of new, but I just upgraded my Wireshark to the latest one, and
my problem is when I do "Follow TCP stream" or UDP stream, the filter
appears something like this:

tcp.stream eq 2

Instead of the source ip, dest ip, source port and dest port. Which I had
in my previous Wireshark version.

I have looked at the options but I have not been able to find the option
that turn off this tcp.stream filter.

You can't find something that's not there.

This was done a long time ago, to fix bug 1447:

       https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1447

Why is this a problem?  There might be some other way of getting the
information/behavior you're trying to get.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org
?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: