Wireshark · Ethereal-users: Re: [Ethereal-users] 802.1Q and capture filters

[Guy Harris <guy@xxxxxxxxxx>]

On Fri, Aug 09, 2002 at 06:47:55AM -0500, McNutt, Justin M. wrote:
> I'm using Ethereal 0.9.5 on a fully-patched RedHat 7.2 system.

What does

	ethereal -h

print?

I was able to reproduce the problem when Ethereal was linked with
libpcap 0.6.2, but not when it was linked with 0.7.1 (and the version I
tried earlier was with WinPcap 2.3, which is based on libpcap 0.6.2).

In fact, this is a bug in libpcap 0.6.2, fixed in 0.7[.x].  The checkin
comment for the fix was:

	revision 1.158
	date: 2001/09/20 00:24:24;  author: fenner;  state: Exp;  lines: +7 -2
	Reset the VLAN flags when compiling a new expression.
	This allows correct compilation of multiple expressions
	 containing the "vlan" keyword in the same program.

	Reported by:    Jon Dugan <jdugan@xxxxxxxxxxxxx>, on the bro@xxxxxxx
	list