Wireshark · Ethereal-dev: [Ethereal-dev] TCP sniffing using Tethereal

[Gilad Evrony <gevro@xxxxxxx>]

Hi,
I think it would be a very powerful tool to be able to use ethereal's read 
filters to sniff whole TCP/UDP sessions.
That way, when a packet matches my filter, not only is it saved to disk but 
also the whole TCP/UDP session it belongs to.

Also, it would be nice if the etheral could create all the TCP/UDP streams 
in a file, rather than having to click one by one (Iris
does this pretty well).

If anyone knows how to do this or can advise me how I'd appreciate it.
Thank you,
Gilad