ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 3798] Display filter suggestion box has inconsistent behav

Date: Fri, 31 Jul 2009 09:43:04 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3798


Guy Harris <guy@xxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         OS/Version|Windows XP                  |All




--- Comment #1 from Guy Harris <guy@xxxxxxxxxxxx>  2009-07-31 09:43:03 PDT ---
Note that the suggestion box is not suggesting a filter - it's suggesting
fields to be used in a filter.

I.e., the suggestion box can be used multiple times when entering a single
filter, e.g. "udp or tcp" or "tcp.duplicate_ack or tcp.zero_window".

In addition, more information might have to be typed after you accept one of
its suggestions, such as with "tcp.reset == 1".

This means that the feature would be less useful if, when you accepted one of
its suggestions for a field, it entered that field *and* accepted the entire
filter as entered so far, as it would only allow you to use it once in the
entire filter.

The difference with "http" is that, currently, there is only one protocol whose
filter name begins with "ht", so once you type "ht" it immediately
auto-completes the name, whereas there are multiple protocols whose filter
names begin with "ud", so once you type "ud" you get a list of matching
protocols, and you never get auto-completion.  With auto-completion, there's no
drop-down list, so the enter key accepts the filter; with suggestion, you get a
drop-down list of suggestions, so the enter key accepts a suggestion, and you'd
need another press of the enter key to accept the filter.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.