Wireshark-bugs: [Wireshark-bugs] [Bug 9607] TFShark (Terminal FileShark)
Date: Tue, 31 Dec 2013 01:11:06 +0000

Comment # 5 on bug 9607 from
Note that presenting a file as a single frame/tvb effectively breaks filtering
in fileshark, but that this functionality was already "broken" for
non-record-based formats since they have no records to filter on anyways.

One possible solution would be to add an API call proto_item_add_record (or
something) which behaves kind of like the whole "generate subset tvb, call
dissector" pattern we have now, except it produces a whole new record (ie row
in the column view) out of what it gets. If done right this might also come in
handy for things like TCP payloads, where multiple frames contained in a single
TCP payload can't be filtered separately right now (they could be done as
separate records instead).


You are receiving this mail because:
  • You are watching all bug changes.