Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2794] New: Questionable display filter fields

Date: Sun, 10 Aug 2008 22:11:10 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2794

           Summary: Questionable display filter fields
           Product: Wireshark
           Version: SVN
          Platform: PC
               URL: http://www.wireshark.org/lists/wireshark-
                    dev/200807/msg00045.html
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: christopher.maynard@xxxxxxxxx


Created an attachment (id=2149)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2149)
Zipped spreadsheet of questionable display filter field names.

Build Information:
Wireshark 1.0.1
--
There are quite a large number of display filter fields whose names are
questionable.  I've compiled a spreadsheet against Wireshark 1.0.1.  As I
mention in both the spreadsheet and the post to the developer's list, I defined
"questionable" as follows:

1) Any field that is not exactly prefixed with its PROTOABBREV and a period.
2) Any protocol that has zero registered fields.
3) Any field that simply doesn't look similar (stands out) to other fields for
that protocol.
4) Fields with apparent redundancies in their names.
5) PROTABBREV itself is a questionable name, (e.g., it contains a period).

The list was compiled manually so there are bound to be "false positives" as
well as display filter fields that are not reported but should have been.  Due
to the large number of fields involved, you'll understand if I missed some or
included any that shouldn't have been.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.