Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 9863] Open Capture File dialog contains display filter con

Date: Mon, 10 Mar 2014 20:03:37 +0000

changed bug 9863

What Removed Added
Status UNCONFIRMED RESOLVED
Hardware x86-64 All
Resolution --- NOTABUG
OS Mac OS X 10.9 All

Comment # 5 on bug 9863 from
Yes, the "read filter" is a way to pre-filter packets when reading the file;
it's been a feature of Wireshark for several major releases.

We also support changing the settings of various name resolution settings; the
one of most interest is probably network-layer name resolution, as file A
might, for example, happen to contain IP addresses that would be mis-resolved
(because they're in one of the RFC 1918 private ranges, and the capture came
from a different site with assignments of addresses in that range separate from
yours) or that might cause slow resolution of names (due to unreachable DNS
servers), so you'd turn network-layer resolution off, whereas file B might be a
local capture where you want that name resolution turned on.  That has also
been a feature of Wirehark for several major releases.

I.e., this is not a bug or even a new feature; it's just continuing to support
an *old* feature in the Qt version.


You are receiving this mail because:
  • You are watching all bug changes.