Project

General

Profile

Actions

Bug #14679

open

Allow simultaneously including/excluding the same type

Added by Martin Kenney 9 months ago. Updated 9 months ago.

Status:
New
Priority:
Normal
Assignee:
Category:
Packet Capture
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Default
Affected Version:
2.7.x
Affected Architecture:
All

Description

Hi All

With the updates in the last couple version it looks like functionality was lost with the GUI packet capture. Previously there was the ability to inline include or exclude IP addresses as well as specifying AND or OR selectors with , or |. The main report here is the ability to include and exclude inline. Exclude would happen by putting a ! infront of the IP address to be excluded. Example when searching for 192.168.1.1 in a capture you see a lot of noise from IP 192.168.1.100. I then used to edit the capture to be 192.168.1.1, !192.168.1.100 and it would be the same capture just excluding 192.168.1.100 to/from.

Thank You

Actions #1

Updated by Christian McDonald 9 months ago

  • Assignee set to Marcos M
Actions #2

Updated by Marcos M 9 months ago

  • Subject changed from Packet Capture to Allow simultaneously including/excluding the same type

This would make sense for types that allow "all of" and "none of" (host, mac, port).

Actions

Also available in: Atom PDF