This is our old Q&A Site. Please post any new questions and answers at

Hello developers, would it be possible to add multi column sorting functionality into Wireshark? That would be really appreciated. It is not that efficient to analyze packets sorted by time. I rather use sort by TCP stream, however then packets are not sorted by time as well but rather in some random order. Really, multi column sorting is needed. Thank you!

asked 22 Feb '11, 02:50

nightbass's gravatar image

accept rate: 0%

Just found this link via Google, because I have the same issue. I would like to sort first by Protocol, and then sequentially for any given protocol. I only need any given protocol packets, but then all is out of order. Ideally (in SQL parlance): ORDER BY protocol, time (or no.)

I get the GTK limitations, but just wanted to add my concern as well.

(07 Nov '11, 15:23) Eric

You might want to add this as a feature request in the Wireshark bugzilla ;-)

permanent link

answered 22 Feb '11, 04:55

Jasper's gravatar image

Jasper ♦♦
accept rate: 18%


I looked into that earlier, as I do find it annoying too. However, as far as I could tell at the time, we use GTK sorting functionality and it did not seem to include sorting on multiple columns. But I might be wrong in that...

(22 Feb '11, 08:06) SYN-bit ♦♦

I did just figure out I could user the filtering capabilities to isolate the protocol then can sort on time. So there is a work around. Thanks!

permanent link

answered 07 Nov '11, 15:36

Eric's gravatar image

accept rate: 0%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 22 Feb '11, 02:50

question was seen: 4,648 times

last updated: 08 Nov '11, 01:45

p​o​w​e​r​e​d by O​S​Q​A