Ethereal-dev: Re: [ethereal-dev] Re: Buglet with ethereal-0.8.2?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Thu, 27 Jan 2000 02:14:38 -0800
> > That's where I had a problem. If I started up ethereal, captured some
> > packets, stopped and did a "Follow" on a TCP entry - I got to see what I
> > wanted. Then if I did a "Reload" I got all the original data back so I could
> > look for other things.
> > 
> > If I use "tcpdump -w" to generate a input file for ethereal, the "Reload"
> > doesn't refresh the data - I still end up with only the last filtered
> > related-TCP data...

"End up with" in what sense?

The set of packets *displayed* and the set of packets *available* are
different - the former is a subset, perhaps a proper subset, of the
latter.

"Follow TCP Stream" sets the display filter to display only the packets
in the TCP stream in question, so that one can use it if one wants to
look at the packets in a particular connection.

"File:Reload" does *not* clear the display filter, so if you have a
display filter set that shows only some packets, after a "File:Reload"
those will be the only packets displayed.

To see the rest of the packets, you need to clear the display filter
with the "Reset" button to the right of the filter text field at the
bottom of the window.