| Bug ID |
8301
|
| Summary |
Right-click display filter functionality generates wrong syntax
|
| Classification |
Unclassified
|
| Product |
Wireshark
|
| Version |
1.8.5
|
| Hardware |
x86
|
| OS |
Windows Vista
|
| Status |
UNCONFIRMED
|
| Severity |
Normal
|
| Priority |
Low
|
| Component |
Wireshark
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Created attachment 9937 [details]
Web browsing session to www.wiresharkbook.com
Build Information:
Version 1.8.5 (SVN Rev 47350 from /trunk-1.8)
Copyright 1998-2013 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (32-bit) with GTK+ 2.24.14, with Cairo 1.10.2, with Pango 1.30.1, with
GLib 2.34.1, with WinPcap (4_1_2), with libz 1.2.5, without POSIX capabilities,
with SMI 0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS
2.12.18, with Gcrypt 1.4.6, with MIT Kerberos, with GeoIP, with PortAudio
V19-devel (built Jan 29 2013), with AirPcap.
Running on 32-bit Windows Vista Service Pack 2, build 6002, with WinPcap
version
4.1.2 (packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch
1_0_rel0b (20091008), GnuTLS 2.12.18, Gcrypt 1.4.6, with AirPcap 4.1.1 build
1838.
Built using Microsoft Visual C++ 10.0 build 40219
--
Right-clicking on a field in the Packet Details pane and selecting Apply as
Filter > Selected generates the syntax for "Not Selected" instead of for
"Selected."
TO RE-CREATE:
Open the attached trace file, "Display Filter.pcapng." This is a web browsing
session to www.wiresharkbook.com. Select packet 1. Expand the IP subtree in the
Packet Details pane. Right-click on the source IP address (192.168.1.3) and
select Prepare a Filter > Selected. The display filter input field will be
populated with "ip.src == 192.168.1.3" which is the correct syntax.
Now right-click on the source IP address field again, and this time select
Apply as Filter > Selected. The display filter input field will be populated
with "!(ip.src == 192.168.1.3)" which is not the correct syntax.
This happened for every field that I tried. Right-clicking and selecting Apply
as Filter > Selected generated the syntax for Apply as Filter > Not Selected.
All other right-click display filter functions appeared to work correctly:
Apply as Filter followed by Not Selected, ...and Selected, ...or Selected, ...
and not Selected, ...or not Selected.
This same behavior was also seen on a Windows XP computer running the
PortableApps version 1.8.5. However, right-click display filter functionality
appears to be working correctly on the latest development version (47527).
You are receiving this mail because:
- You are watching all bug changes.
