Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 1806] IP dissector Expert Info flags packets with a low TT

Date: Tue, 28 Aug 2007 20:09:03 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1806





------- Comment #5 from todd.martin@xxxxxxx  2007-08-28 20:09 GMT -------
After playing with this some more, I think the best coloring rule for Low TTL
is this:

ip.ttl < 5 && !(ip.dst >= 224.0.0.0 && ip.dst <= 224.0.0.255)


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.