This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Going through Laura chappel's WCNA guide and came across copy | as filter option. Any use case for this feature is appreciated.When do we need to buffer the filter?

asked 16 May '13, 22:04

krishnayeddula's gravatar image

krishnayeddula
629354148
accept rate: 6%


I can think of many use cases, but the one I had that made me develop this functionality was this:

I was analyzing client side and server side traces of a session over an Alteon loadbalancer. When matching a session on the client side to the session on the server side, I had to use the tcp sequence number. So what I did was prepare a filter on the sequence number, and then copied it from the filter box to put it in the search filter of the other wireshark session. Having "Copy as filter" made it a lot easier :-)

permanent link

answered 17 May '13, 00:00

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

Thats why I use it too, it helps searching with the find dialog when you dont want to replace the display filter.

(17 May '13, 01:40) Jasper ♦♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×63
×40

question asked: 16 May '13, 22:04

question was seen: 1,599 times

last updated: 17 May '13, 01:40

p​o​w​e​r​e​d by O​S​Q​A