When I want to see the contents of a packet (the detailswindow) I have to click the 'last' packet in live scrolling. 'Last', because there will be new packets already helas.
Can I somehow have the detailspane show that last packet in realtime?
As you probably realised 'last' becomes a fast changing designator with even moderate network traffic already. Therefore triggering detailed dissection of each last packet would lead to a significant refresh rate of the packet details pane, rendering it useless to view (and perhaps migraine inducing). Therefore such setting does not exist. You may be able to reproduce the effect using tshark in a terminal window by selecting detailed dissection (-V and possibly -O), but again, the scrolling would reduce usability.
As you probably realised 'last' becomes a fast changing designator with even moderate network traffic already. Therefore triggering detailed dissection of each last packet would lead to a significant refresh rate of the packet details pane,
Where "refresh" means "change the packet that's being displayed" - if the traffic is coming in fast enough, and you want to see how the most recently-arrived packet is dissected, all I have to see is "blink andyou'll miss it" - the packet might not stay selected long enough for your visual cortex to handle it, much less long enough for your neocortex to handle it. (If Wireshark can do more than 30 updates of that pane per second, it might make an interesting movie, however.... :-))
I suppose we could offer it and limit the number of changes to the selection of once every 30 seconds or whatever rate a human (other than these ...
I suppose we could offer it and limit the number of changes to the selection of once every 30 seconds or whatever rate a human (...) can handle.
Which will become a race to the bottom, eventually. I can see the questions already: "why can't the refresh rate be set to infinite?"
"Infinite" as in "once every infinite amount of time", meaning "never change the selection", which we already offer, or "update as fast as you can", which would be somewhat hilarious if somebody did that and complained because they hadn't hit the barrier at the edge of the galaxy and couldn't keep up?
That's going to depend on whether they are a trekkie or not.
Comments