Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Is 'mark all packets' functionality widely used(or is it use

From: "Maynard, Chris" <Christopher.Maynard@xxxxxxxxx>
Date: Sun, 22 Mar 2009 10:09:53 -0400

Mark all packets doesn’t necessarily mark all packets in the capture file.  It only marks all currently displayed packets, which could be any subset depending on the display filter applied.

 

 

From: wireshark-dev-bounces@xxxxxxxxxxxxx [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of yami
Sent: Sunday, March 22, 2009 5:16 AM
To: Developer support list for Wireshark
Subject: Re: [Wireshark-dev] Is 'mark all packets' functionality widely used(or is it useful?)?

 

I see. Thanks!

Of course we can mark the excluded ones and save 'unmarked packets' for this scenario, however I feel 'saving unmarked' is not intuitive for end users.

On Sun, Mar 22, 2009 at 3:51 PM, Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx> wrote:

On Sun, Mar 22, 2009 at 03:08:05PM +0800, yami wrote:

> I can not figure out why marking all packets is a useful
> functionality. Could anyone kindly give some use cases?

You can mark all packets, then unmark certain ones before saving.


Steve

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe

 

CONFIDENTIALITY NOTICE: The contents of this email are confidential
and for the exclusive use of the intended recipient. If you receive this
email in error, please delete it from your system immediately and 
notify us either by email, telephone or fax. You should not copy,
forward, or otherwise disclose the content of the email.