sniffnet icon indicating copy to clipboard operation
sniffnet copied to clipboard

Better capture filtering

Open jaskij opened this issue 7 months ago • 3 comments

Is there an existing issue for this?

  • [x] I have searched the existing issues.

Describe the solution you'd like

Just coming off having tested Sniffnet for the first time, and two things I'd like to see improved when it comes to configuring capture options:

  • ability to specify capture filters using pcap filter syntax - like I would in Wireshark, or on the commandline using tcpdump - basically an escape hatch for things I can't configure for the GUI
  • for the application to remember my recently used filters

Is your feature request related to a problem?

I see two problems here:

  • the current capture filter GUI is very simplistic and unable to express even a mildly complex capture filter
  • ease of use for people familiar with existing software (like Wireshark or tcpdump)

jaskij avatar May 20 '25 21:05 jaskij

Thanks for the idea!

GyulyVGC avatar May 20 '25 21:05 GyulyVGC

BPF Rules could also be a good idea to implement, it is natively used in most of linux networking packages.

aguacero7 avatar May 30 '25 14:05 aguacero7

I agree that adding a text input for BPF rules could have sense. And the BPF syntax is also supported by the PCAP library I'm using.

GyulyVGC avatar Jun 01 '25 12:06 GyulyVGC

As per #705 and #862, I want to use this issue also to track the need to update the existing filter inputs for ports and IPs to support exclusion criteria (right now, they can only specify what to include but not what to exclude).

GyulyVGC avatar Jul 09 '25 21:07 GyulyVGC

As per #705 and #862, I want to use this issue also to track the need to update the existing filter inputs for ports and IPs to support exclusion criteria (right now, they can only specify what to include but not what to exclude).

Super. Looking forward to it. :)

fyngyrz avatar Jul 10 '25 02:07 fyngyrz