https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6912
Summary: Capture filters for higher level protocols don't work
when there is PPP or PPPoE encapsulation
Product: Wireshark
Version: 1.6.5
Platform: x86
OS/Version: Linux (other)
Status: NEW
Severity: Major
Priority: Low
Component: Wireshark
AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
ReportedBy: x12ozmouse@xxxxx
Created attachment 7958
--> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=7958
A sample packet that is not captured when using "udp" or "ip" etc
Build Information:
Wireshark 1.6.5 (SVN Rev Unknown from unknown)
Compiled (32-bit) with GTK+ 2.20.1, with GLib 2.24.1, with libpcap (version
unknown), with libz 1.2.3.3, with POSIX capabilities (Linux), without libpcre,
with SMI 0.4.8, with c-ares 1.7.0, without Lua, without Python, with GnuTLS
2.8.5, with Gcrypt 1.4.4, with MIT Kerberos, with GeoIP, with PortAudio
V19-devel (built Feb 18 2010 22:31:30), without AirPcap.
Running on Linux 2.6.39.4, with libpcap version 1.0.0, with libz 1.2.3.3,
GnuTLS 2.8.5, Gcrypt 1.4.4.
Built using gcc 4.4.3.
--
The problem is, if there is PPP and/or PPPoE encapsulation in the packet, the
capture filter does not work on higher level protocols. For example I can't use
"ip" or "ip proto 41" or "udp" on the attached packet, it will simply not be
accepted.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
