When you try to follow tcp/udp stream on a packet, it pops up a new window with the stream content but it also changes the display filter on the main window (tc.stream eq 100 for instance). Is there a way to make wireshark not change the filter? asked 07 Sep '12, 00:02  l46kok |
One Answer:
Unfortunately not. The way "follow..." works is dependent on the fact that the capture file is filtered so that only frames from the same conversation are displayed. To change this behavior, the Wireshark source code must be altered... answered 07 Sep '12, 00:15  SYN-bit ♦♦ |
