Wireshark · Ethereal-dev: Re: [Ethereal-dev] Match selected from packet list & Prepare line

[Jirka Novak <j.novak@xxxxxxxxxxxx>]

Guy Harris wrote:

> On Thu, Jan 03, 2002 at 11:47:45PM -0800, Guy Harris wrote:
>
> > 3) If there's no "Display Filter" dialog box open, pop it up, with a
> > blank "Filter name" field and a "Filter string" field containing the
> > filter expression in question; if there is a "Display Filter" dialog box
> > open, insert the filter at the current cursor position in the "Filter
> > string" field.
>
> Or
>
> 4) Insert the filter at the current cursor position in the filter field
> at the bottom of the screen but *don't* apply the filter immediately.

                              ^^^^^^^^^^^^^^^^^ it is not possible if 
you use 'Match Selected'



I'm sorry, but it doesn't work, or work differend way I need.

I usualy build filter expression by 'Match Selected' from packet tree.
When I use 'Match Selected', new filter is automaticly applyed. To 
combine two expressions together you have to:
1) 'Match Selected' something in packet tree
2) Close filter window if opened. There is no other way to transfer 
active filter to filter window than close and open it (or cat and paste)
3) Open filter window - new expression is there
4) Reset active filter
5) Select another packet and 'Match Selected' (new part of filter is 
active!)
6) Cut and paste new filter to filter dialog with appropriate operator 
(and, or, ...)
7) Apply new filter from filter dialog to filter line

It is long "algorithm" to combine filter expressions, I think.
But in some cases it is very usefull that new filter expressions are 
automaticly applied.

But I think that ability to disable it or bypass it may be very usefull 
when you construct complex expressions.

						Jirka Novak