Wireshark-bugs: [Wireshark-bugs] [Bug 11357] New: set operations for display filters
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 13 Jul 2015 12:58:02 +0000
Bug ID 11357
Summary set operations for display filters
Product Wireshark
Version unspecified
Hardware All
OS All
Status UNCONFIRMED
Severity Enhancement
Priority Low
Component GTK+ UI
Assignee bugzilla-admin@wireshark.org
Reporter azrdev@qrdn.de 

Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
I frequently had the use case of filtering out multiple tcp.streams, which led
to cumbersome display filter strings like "tcp.stream eq 0 or tcp.stream eq 2
or tcp.stream eq 468 ..."

To ease this, a set operator might be useful, like "tcp.stream in
{0,2,468,324}". Maybe this could be also done with filter macros, if there's a
possibility to pass & use arbitrary-length vectors to them

You are receiving this mail because:
  • You are watching all bug changes.