Wireshark · Ethereal-dev: [Ethereal-dev] Feature request... CROP

[Chris Wilson <chris@xxxxxxxxxxxxx>]

Hi all,


Thought I'd get some views on this before digging around in the sourcecode.

When using Ethereal I've often wanted a "crop" feature - that would discard all the packets not matched by a particular filter, so that subsequent filtering is much quicker. A little button next to "Clear" and "Apply" on the GUI mainscreen would be perfect.

In order to achieve this at the moment on has to click "Save as" and save just the displayed capture in a new file, then open the new file and close the old one.

I realise that this saving/reloading is probably going to be neccessary since all the packets will need to be refiltered once the unmatched packets are discarded.

So... do people think this sounds sensible:

A "Crop" button next to "Clear" and "Apply" on the mainscreen.

The button would save the displayed packets to a temporary file, load the temporary file but still leave ethereal thinking it's editing the original file (so that "Save" overwrites the original file).

Hopefully I should be able to implement this without changing too much of the file loading internals.

Let me know your thoughts...

Cheers,

Chris

-- 
Chris Wilson <chris@xxxxxxxxxxxxx>
http://www.mxtelecom.com