Ethereal-dev: Re: [ethereal-dev] follow tcp stream alters which packets are displayed

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Nathan Neulinger <nneul@xxxxxxx>
Date: Sun, 14 Nov 1999 17:53:22 -0600
Guy Harris wrote:
> 
> > If I have a filter set "yhoo", and then follow tcp stream for one of
> > those packets, it shows a bunch of tcp ack packets that were not
> > previously visible.
> 
> Yes, that's intentional - it changes the display filter to something
> that matches all packets in the stream, and no other packets, so that
> you can use it to limit the display to packets in a TCP connection.

Might be good then to actually change the display filter specification
in the filter box. Right now, it's non-intuitive cause the filter box
still says "yhoo", but the displayed packets don't necessarily match
that specification. 

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nneul@xxxxxxx
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216