http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1503
------- Comment #5 from sake@xxxxxxxxxx 2007-04-03 05:43 GMT -------
(In reply to comment #4)
> - highlight ssl.handshake.version -> compare frames 6, 44 & 46 which all have a
> field called ssl.handshake.version. But only frame 46 is colored.
I did two more tests with the following color-filters:
- highlight "ssl.handshake.version == 0x0002" -> Now frame 6 is properly
colored (frame 4 still uses ssl.record.version instead of
ssl.handshake.version, so it is not colored). Frames 44 & 46 are not colored,
which is also correct.
- highlight "ssl.handshake.version != 0x0001" -> Now frames 6, 44 & 46 are
indeed properly colored.
So it looks indeed that two different hf's with the same field-name can be
used, only not when that field-name is used as a filter.
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
