Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 4659] New: Searching up or down after arranging by Info co

Date: Fri, 9 Apr 2010 12:33:35 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4659

           Summary: Searching up or down after arranging by Info column
                    does not search in visual order
           Product: Wireshark
           Version: 1.2.7
          Platform: Other
        OS/Version: Windows XP
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: wesson@xxxxxxxxx


Build Information:
Version 1.2.7 (SVN Rev 32341)

Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.16.6, with GLib 2.22.4, with WinPcap (version unknown),
with libz 1.2.3, without POSIX capabilities, without libpcre, with SMI 0.4.8,
with c-ares 1.7.0, with Lua 5.1, with GnuTLS 2.8.5, with Gcrypt 1.4.5, with MIT
Kerberos, with GeoIP, with PortAudio V19-devel (built Mar 31 2010), with
AirPcap.

Running on Windows XP Service Pack 2, build 2600, with WinPcap version 4.1.1
(packet.dll version 4.1.0.1753), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 2.8.5, Gcrypt 1.4.5, without AirPcap.

Built using Microsoft Visual C++ 9.0 build 30729

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
Problem:
After clicking the Info column to arrange the data in alphabetical order, and
then executing a search for specific data, each next search result highlights a
packet numerically next rather than visually next.

Reproduction steps:
1. Create a new, unfiltered packet capture while browsing several different
websites.  Sites which have a lot of embedded URLs are good as you will get
many different domain names.  Ideally browse several sites at once so there is
a mix of different host names at the same time.
2. Arrange by Info (this assumes a default column layout, or at least having
the frame number column and info column present with default values).
3. Scroll to the top of the capture, highlighting the first packet.  It will
hopefully not be labeled as frame 1, though reproduction can still happen if it
is.
4. Search (ctrl+f) for the following:
http.request

The result may not be the first request visually present in the info-arranged
packet list.  It will be the next numerically.  For example, if your capture
had three HTTP requests on frames 2, 15, and 37, and your info arranged list
started with the first frame being frame 13, if you did the search in step 4
and hit Find, the first frame it would highlight would be frame 15 no matter
where that frame falls in your visual list.  Continuing to search (ctrl+n
default) will continue to find the next frame numerically rather than the next
in visual order.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.