Ask Your Question
0

Selected packet position when display filter is removed

asked 2020-01-09 10:34:03 +0000

Are there any options (can't find any, but..) related to the position of the selected/highlighted packet when a display filter is removed?

For example, if I capture everything on my LAN for a few seconds then add a UDP display filter, I see only UDP packets showing in the capture window. If I select the middle line in that, then remove the display filter, the selected line moves to the bottom of the capture window and remains selected. Are there any options to change that behaviour, for example it might be nice to have the selected line not move.

Here's an example to illustrate what happens now, with 3.0.7. Say I have the following displayed:

58 DNS
59 IGMPv2
60 UDP
61 IGMPv2
62 IGMPv2
63 IGMPv2
64 IGMPv2
65 ARP
66 WireGuard
67 WireGuard
68 TCP

I select packet 60 then apply UDP as a filter. The capture window changes to:

49 DNS
50 DNS
51 DNS
52 DNS
53 DNS
54 DNS
55 DNS
56 DNS
57 DNS
58 DNS
60 UDP <- selected packet moves to the bottom

Now, if I scroll so that packet 60 is in the middle of the capture list I get:

54 DNS
55 DNS
56 DNS
57 DNS
58 DNS
60 UDP
66 WireGuard
67 WireGuard
91 WireGuard
92 DNS
93 DNS

Then finally, with packet 60 still selected, I delete the capture expression and get:

50 DNS
51 DNS
52 DNS
53 DNS
54 DNS
55 DNS
56 DNS
57 DNS
58 DNS
59 IGMPv2
60 UDP <- selected packet moves to the bottom again

It would be nice (in my opinion :-)) to be able to apply and remove filters without the selected packet being moved, i.e. if it's in the middle row of the capture window before applying the filter, it stays there after the filter is applied and then when the filter is removed.

Is this currently possible?

edit retag flag offensive close merge delete

Comments

These don't help? Display Options in the capture config:

Update list of packets in real-time
Automatically scroll during live capture
Show capture information during live capture
Chuckc gravatar imageChuckc ( 2020-01-09 13:00:35 +0000 )edit

@bubbasnmp No. The scenario I described above, although it doesn't specifically mention it, is related to viewing and filtering after the capture has been stopped.

cosimo193 gravatar imagecosimo193 ( 2020-01-09 13:05:47 +0000 )edit

Ok. Thanks for clarifying. "Capture window" is the Packet List

Chuckc gravatar imageChuckc ( 2020-01-09 13:22:07 +0000 )edit

Ah, ok. Thanks for that.

cosimo193 gravatar imagecosimo193 ( 2020-01-09 14:22:00 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2020-01-09 11:37:19 +0000

Jaap gravatar image

Even though it sounds simple, this is not a trivial matter and requires some Qt interface wizardry. Please file an enhancement bug report so that it can be addressed by someone capable, willing and able.

edit flag offensive delete link more

Comments

Thanks for your reply; lots of things sound simple until you start delving into getting them to happen in Qt (in my experience) :-) Thanks for the link to the bug report; I'll fill that in.

John

cosimo193 gravatar imagecosimo193 ( 2020-01-09 12:07:16 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2020-01-09 10:34:03 +0000

Seen: 179 times

Last updated: Jan 09 '20