Re: [Wireshark-dev] [Wireshark-bugs] [Bug 9817] Provide a way to clear the capture window without restarting the capture or reapplying the filter

[Bill Meier]

On 2/28/2014 3:45 PM, Guy Harris wrote:


On Feb 28, 2014, at 11:52 AM, Bill Meier  wrote:


How about a third choice: just clear the summary pane (or scroll
down so that the previous last line shown is at now the top (or
similar) ?


The summary pane currently shows what packets are in the capture, so
"clearing the summary pane" and "discarding the packets in the
capture" are inherently the same operation.

Are you suggesting that we change the Wireshark internal model so
that there is no longer one frame data structure for every packet in
the file, or that we, in effect, have *two* forms of filtering of the
display - filtering based on a filter expression and filtering based
on "don't display any packets before this one"?

If so, which packets should, for example, a Save, Save As, or Export
Specified Packets operation see?  Should it see the ones "cleared"
from the display?


Neither:

Upon entering some keystroke, literally just do a scroll down so that 
only the last frame (being displayed at the time the keystroke is 
entered) shows the at the top of the pane.


Can this be done (easily?) (at all?) using QT; I've no idea.

Is this worthwhile ?

Most of the time I wouldn't think this at all useful.

However, if the frames which are being displayed occur at a slow rate, 
then "resetting" the screen display as needed now and then might make it 
easier to notice when new frames are displayed.


Is this what the OP had in mind ? I'm not sure.

P.S. if the capture display is being done in "no scroll" mode, can a 
user hit page down (or something) to scroll down the screen while a 
capture is in progress ?  (I don't have time to try this right now).


If so, "scroll past" (or something) might be another variant.

___
Sent via:Wireshark-dev mailing list 
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

Re: [Wireshark-dev] [Wireshark-bugs] [Bug 9817] Provide a way to clear the capture window without restarting the capture or reapplying the filter

[Guy Harris]

On Feb 28, 2014, at 11:52 AM, Bill Meier  wrote:

> How about a third choice: just clear the summary pane (or scroll down so that 
> the previous last line shown is at now the top (or similar) ?

The summary pane currently shows what packets are in the capture, so "clearing 
the summary pane" and "discarding the packets in the capture" are inherently 
the same operation.

Are you suggesting that we change the Wireshark internal model so that there is 
no longer one frame data structure for every packet in the file, or that we, in 
effect, have *two* forms of filtering of the display - filtering based on a 
filter expression and filtering based on "don't display any packets before this 
one"?

If so, which packets should, for example, a Save, Save As, or Export Specified 
Packets operation see?  Should it see the ones "cleared" from the display?
___
Sent via:Wireshark-dev mailing list 
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
 mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

Re: [Wireshark-dev] [Wireshark-bugs] [Bug 9817] Provide a way to clear the capture window without restarting the capture or reapplying the filter

[Bill Meier]

On 2/28/2014 2:46 PM, bugzilla-dae...@wireshark.org wrote:

*Comment # 3
 on bug
9817  from Guy
Harris  *

(In reply tocomment #2  )

It means to clear the display.


The display shows the (possibly improper) subset of captured packets that pass
the currently-active filter (if any; if none, all packets "pass", hence
"possibly improper").

Thus, there are two ways to "clear the display", in the sense of having no
packets shown:

 1) have a filter that matches no packets;

 2) permanently discard all the captured packets.


If that means discarding all captured packets, then yes, that sounds about
right.


That's choice number 2.


Is that the same as restarting the running live capture?


If you are currently running a live capture, and want to clear the display but
continue to capture, the only conceivable way to do that would be to restart
the capture - because doing that amounts to restarting the capture, so it's not
as if it's logically possible to implement that *except* by restarting the
capture.

If you are currently running a live capture, and want to *stop* capturing and
clear the display, that would be done by stopping the capture and then closing
it.

If you're finished capturing, and want to clear the display, that would be done
by closing the capture.




How about a third choice: just clear the summary pane (or scroll down so 
that the previous last line shown is at now the top (or similar) ?




___
Sent via:Wireshark-dev mailing list 
Archives:http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe