Wireshark · Wireshark-users: Re: [Wireshark-users] Filter change

[Rodrigo Guti <rgutierrez9@xxxxxxxxx>]

Hi,

Thanks for the reply, I am using Version 1.2.6, that bug is fixed in my version. This is what I would like to see in my filter box, on my previous version, after I do follow TCP stream, on the filter box, I got this:

Filter: (ip.addr eq 97.65.22.235 and ip.addr eq 10.198.16.99) and (tcp.port eq 80 and tcp.port eq 2922)

But now, on my new code, after I do follow TCP stream, I got this:

Filter: tcp.stream eq 2

I am wondering if there is a way to get my old filter information displayed, like the one in my previous version.

I am not having any problem with my filters, it is just how the filter is displayed in the Filter box.

Please let me know if there is a way to modify that.

Thanks!!

2010/4/16 Guy Harris <guy@xxxxxxxxxxxx>

On Apr 16, 2010, at 5:24 PM, Rodrigo Guti wrote:

> I am kind of new, but I just upgraded my Wireshark to the latest one, and my problem is when I do "Follow TCP stream" or UDP stream, the filter appears something like this:
>
> tcp.stream eq 2
>
> Instead of the source ip, dest ip, source port and dest port. Which I had in my previous Wireshark version.
>
> I have looked at the options but I have not been able to find the option that turn off this tcp.stream filter.

You can't find something that's not there.

This was done a long time ago, to fix bug 1447:

       https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1447

Why is this a problem?  There might be some other way of getting the information/behavior you're trying to get.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe