Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] [Wireshark-bugs] [Bug 9817] Provide a way to clear the captu

Date Prev · Date Next · Thread Prev · Thread Next
From: Bill Meier <wmeier@xxxxxxxxxxx>
Date: Fri, 28 Feb 2014 17:00:22 -0500
On 2/28/2014 3:45 PM, Guy Harris wrote:

On Feb 28, 2014, at 11:52 AM, Bill Meier <wmeier@xxxxxxxxxxx> wrote:

How about a third choice: just clear the summary pane (or scroll
down so that the previous last line shown is at now the top (or
similar) ?

The summary pane currently shows what packets are in the capture, so
"clearing the summary pane" and "discarding the packets in the
capture" are inherently the same operation.

Are you suggesting that we change the Wireshark internal model so
that there is no longer one frame data structure for every packet in
the file, or that we, in effect, have *two* forms of filtering of the
display - filtering based on a filter expression and filtering based
on "don't display any packets before this one"?

If so, which packets should, for example, a Save, Save As, or Export
Specified Packets operation see?  Should it see the ones "cleared"
from the display?

Neither:

Upon entering some keystroke, literally just do a scroll down so that only the last frame (being displayed at the time the keystroke is entered) shows the at the top of the pane.

Can this be done (easily?) (at all?) using QT; I've no idea.

Is this worthwhile ?

Most of the time I wouldn't think this at all useful.

However, if the frames which are being displayed occur at a slow rate, then "resetting" the screen display as needed now and then might make it easier to notice when new frames are displayed.

Is this what the OP had in mind ? I'm not sure.

P.S. if the capture display is being done in "no scroll" mode, can a user hit page down (or something) to scroll down the screen while a capture is in progress ? (I don't have time to try this right now).

If so, "scroll past" (or something) might be another variant.