Wireshark-bugs: [Wireshark-bugs] [Bug 593] build filter rules using (sub-)filter definitions

From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 3 Sep 2007 07:21:46 +0000 (GMT)

http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=593





------- Comment #4 from luis.ontanon@xxxxxxxxx  2007-09-03 07:21 GMT -------
(In reply to comment #3)
> I tried that, but I defined a filter "FNORD" to be "http || smtp", and filtered
> with "${FNORD}" and it showed TCP packets that didn't contain any HTTP. 

That's odd... as the macros are applied *before* the filter is passed to the
compiler.
do you have different results filtering with 'http || smtp'?  


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.