Hello developers, would it be possible to add multi column sorting functionality into Wireshark? That would be really appreciated. It is not that efficient to analyze packets sorted by time. I rather use sort by TCP stream, however then packets are not sorted by time as well but rather in some random order. Really, multi column sorting is needed. Thank you! asked 22 Feb '11, 02:50  nightbass |
2 Answers:
You might want to add this as a feature request in the Wireshark bugzilla ;-) answered 22 Feb '11, 04:55  Jasper ♦♦ 1 I looked into that earlier, as I do find it annoying too. However, as far as I could tell at the time, we use GTK sorting functionality and it did not seem to include sorting on multiple columns. But I might be wrong in that... (22 Feb '11, 08:06) SYN-bit ♦♦ |
I did just figure out I could user the filtering capabilities to isolate the protocol then can sort on time. So there is a work around. Thanks! answered 07 Nov '11, 15:36  Eric |
Just found this link via Google, because I have the same issue. I would like to sort first by Protocol, and then sequentially for any given protocol. I only need any given protocol packets, but then all is out of order. Ideally (in SQL parlance): ORDER BY protocol, time (or no.)
I get the GTK limitations, but just wanted to add my concern as well.