This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.
3
1

I often use a display filter (e.g. "ssl.record.content_type==21" to get a list of packets for further inspection. If I then use 'Follow TCP Stream' or the like, I have to go back to the display filter dialog and reselect "ssl.record.content-type==21" again (and hit Apply) to get back to my 'master list' of curious packets.

How about something like a "back button" that would simply go back to the previous display filter? I don't see anything like that, and it would be VERY handy as I wade through various displays...what do you think?

asked 26 Jul '11, 19:36

wesmorgan1's gravatar image

wesmorgan1
411101221
accept rate: 4%

edited 26 Jul '11, 19:37

This is an feature I often missed in daily practice with wireshark: - open wireshark log - watch for tcp connections - open the interested tcp stream - GO-BACK to old view

And it seems to be a common use - like in browsers. So I'm wondering, why we only have 2 'like it' post (2012/04/12).

I only found this patch in Bugzilla - which seems to be rejected, but sound dedicated to this feature request: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1869

Is anybody able to push this patch/feature?

Ralf

(19 Apr '12, 23:10) Ralf S

you do know about the capture filter history which by default saves the last 10 display filters in the drop down list, right? I agree that a simple "back" button would do the work too - but the history works fine for me

(20 Apr '12, 00:52) Landi

To submit an RFE (request for enhancement):

  1. Search Wireshark Bugzilla for an existing RFE that matches your request. If none exist, file a new "bug", setting the Severity to Enhancement. If you're a developer, you're encouraged to submit a patch (attached to the bug report).

  2. Vote for the bug by clicking the vote link next to Importance. You can even vote for your own bug that you just filed in step 1.

  3. (OPTIONAL) Take a look at the WishList wiki. You're asked to email the developer mailing list before adding to the WishList. However, the RFE from step 1 should suffice (and is preferred since it gets tracked).

permanent link

answered 26 Jul '11, 20:20

helloworld's gravatar image

helloworld
3.1k42041
accept rate: 28%

edited 26 Jul '11, 20:26

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×165
×10

question asked: 26 Jul '11, 19:36

question was seen: 3,742 times

last updated: 20 Apr '12, 01:54

p​o​w​e​r​e​d by O​S​Q​A