Ethereal-dev: Re: [ethereal-dev] follow tcp stream alters which packets are displayed

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Sun, 14 Nov 1999 21:34:05 -0600
On Sun, Nov 14, 1999 at 05:53:22PM -0600, Nathan Neulinger wrote:
> Guy Harris wrote:
> > 
> > Yes, that's intentional - it changes the display filter to something
> > that matches all packets in the stream, and no other packets, so that
> > you can use it to limit the display to packets in a TCP connection.
> 
> Might be good then to actually change the display filter specification
> in the filter box. Right now, it's non-intuitive cause the filter box
> still says "yhoo", but the displayed packets don't necessarily match
> that specification. 
> 
> -- Nathan

I tried something similar a while back:

http://ethereal.zing.org/lists/ethereal-dev/199908/msg00188.html

However, there were some reservations, so I reverted my change.
Some people like having the filter stay in effect, and others don't.
Hmm, sounds like a good user-defined behavior to me.

--gilbert