Hi. While using this excellent tool (SnifferTM has only the expert to really compete i feel!) i came up with even more: give me a "BACK" and "FORWARD" button for the filterstring-history like in the webbrowsers, not just the drop down list. add the browser-like mouse-thumb-buttons for quick navigation. Maybe clear the filter-box when closing the current / opening a new trace to start out fresh? Here in my training class it is annoying to have the old filter on the new trace. Don't know about real life yet.. Please decide. why is the filter-string-box not resizeable? A simple follow TCP stream will already be bigger - i guess a lot of people asked that already, so: sorry ;) can i have a separate font for hex window (all windows?) ? it takes up too much space for being of too little interest for me (using 2nd layout, hex lower right, eating away details). i would not mind setting it to a barely readable fontsize to gain space and on the downside have to lean forward to the screen if i really wanted to read something hex-ish in every 10th packet. filter on the protocol-dissector-detail when doubleclicking it - as if using "apply filter as -> selected". eg. go to SMB multiplex-id, doubleclick it to filter on smb.mid == 0F00. the executed action should be configurable, so you can turn it off or set it to "prepare as/AND/not" if you like. Be a bit inspired by the windows-explorer and modify the cursor and the action when holding shift/+ctrl/+alt when doubleclicking to represent and/not/or/add/whatever. add a button on the searchbar that says "Marked" which filters with "frame.marked == 1" to zoom in on packets that you found interesting while browsing through the trace before. Put separators in the Y-axis-scale of the IOgraph so you get 1,000 / 1,000,000 (get separator from OS?) etc. Counting zeros at that size is ugly. Looking forward to hearing from you :) Chris
Powered by MHonArc 2.6.10