Re: [ethereal-dev] Ethereal memory leakage fix and feature enhancement

[Guy Harris <guy@xxxxxxxxxx>]

> this is a patch to fix against 0.7.0 to fix some memory leakages (this
> appears to be already done in 0.7.1) and to add the possibility to specify
> a filter for loading capture files.
> 
> ethereal -R "ip.addr==127.0.0.1" -r capture.log 
> 
> This would read only those packets from capture.log which have a source or
> destination address of 127.0.0.1.

Which of:

	a filter that controls what packets are read, so that the
	packets that pass the filter are contiguously, and only those
	packets are printed if you do "File/Print", but so that you
	can't change the filter and see packets that didn't pass the
	command-line filter

or

	a filter that's applied as an initial display filter (so that
	the packets that pass the filter may be numbered
	discontiguously, and the current "File/Print", which lacks a
	"print only filtered packets" option, will print even the packets
	that don't pass the filter, but so that you can change the
	display filter and see the packets not selected

be preferable?