ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 7270] Cannot filter only displayed packets

Date: Mon, 21 May 2012 12:46:26 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7270

Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |

--- Comment #6 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> 2012-05-21 12:46:26 PDT ---
(In reply to comment #4)
> There's still problem if you filter packets more than once.

Nuts...

> For example when you filter: 'tcp', and later 'http' after saving you'll get
> 462 packets once again ;/
> 
> We need some code which clears dependent_of_displayed flag before
> (re)filtering.

Yep.

> I'm not sure about dependent frame implementation. 
> Frame in list are always in symmetric relation?
> So If frame A depends on frame B, than frame B depends on frame A?

No, the dependencies were designed to be one-way: frame B passed the display
filter so we mark its dependencies (e.g., A) as "dependent_of_displayed".  So,
for example, this problem can be easily fixed if you clear your display filter
before moving on to another one (done in r42758).

Handling switching from one dfilter to another requires more thought.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.