Wireshark · Ethereal-users: Re: [Ethereal-users] display filter problem...

[Guy Harris <gharris@xxxxxxxxx>]

DAIGLE, ANDREW PAUL wrote:

> Forgive me if I'm mis-reading your response, Guy, but this is a new
> issue that just started in version 0.10.14. Filter validation is
> certainly not new to 0.10.14, but the long delay when entering ip
> address filters is. 

Nope, it's not new in 0.10.14.  I just reproduced it with 0.10.13 (.13, 
not .14), on Windows XP.

I wasn't seeing it before I turned on network name resolution.

I started seeing it as soon as I turned it on.

> I am still running version 0.10.13 on another machine and there is no
> delay whatsoever when entering the above display filter.

Do you have network name resolution turned on?

Did you try a filter such as 111.222.333.444 (yes, with something that's 
an illegal dotted quad)?

Did you try a filter with a host name rather than an address?

It might be that a change in 0.10.14 makes it more *likely* that this 
problem shows up, but it does occur in earlier releases, and it has been 
complained about in earlier releases.  See, for example, bug 523:

	http://bugs.ethereal.com/bugzilla/show_bug.cgi?id=523