Wireshark · Ethereal-dev: [Ethereal-dev] Need to disable capture filter generated by get_conn_cfilter()

["Jim Young" <SYSJHY@xxxxxxxxxxxxxxx>]

Hello,

On December 16 2005 , in SVN 16826, a change was made to 
util.c's get_conn_cfilter() function to unconditionally generate 
a capture filter of "not ip port 3389" if the environment variable 
"CLIENTNAME" exists.  

Prior to this change a previous change submitted on December 1, 
2003 (SVN 9130) suppressed the creation of the default capture 
filter if the CLIENTNAME variable was set to "Console".

Should the test for the "CLIENTNAME=Console" value be restored? 
e.g.:

} else if ((env = getenv("CLIENTNAME")) != NULL) {
	if (g_strcasecmp("console", env) != 0) {
		g_string_sprintf(filter_str, "not tcp port 3389");
		return filter_str->str;
	}
}

In addition to (or instead of) the above change would it be useful
to have some type of global preference to disable the automatic 
creation of any of the default capture filters by util.c's 
get_conn_cfilter()?

As a workaround to the problem of suppressing the automatically 
generated capture filter, one can use Ethereal's "-f" parameter 
with an ASCII white space character as the capture filter e.g. "-f ".

I hope someone finds this information useful.

Best regards,

Jim Young