Better capture filtering
Is there an existing issue for this?
- [x] I have searched the existing issues.
Describe the solution you'd like
Just coming off having tested Sniffnet for the first time, and two things I'd like to see improved when it comes to configuring capture options:
- ability to specify capture filters using pcap filter syntax - like I would in Wireshark, or on the commandline using
tcpdump- basically an escape hatch for things I can't configure for the GUI - for the application to remember my recently used filters
Is your feature request related to a problem?
I see two problems here:
- the current capture filter GUI is very simplistic and unable to express even a mildly complex capture filter
- ease of use for people familiar with existing software (like Wireshark or
tcpdump)
Thanks for the idea!
BPF Rules could also be a good idea to implement, it is natively used in most of linux networking packages.
I agree that adding a text input for BPF rules could have sense. And the BPF syntax is also supported by the PCAP library I'm using.
As per #705 and #862, I want to use this issue also to track the need to update the existing filter inputs for ports and IPs to support exclusion criteria (right now, they can only specify what to include but not what to exclude).