ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 6228] New: [Enter] key behavior varies when manually typin

Date: Tue, 9 Aug 2011 18:32:20 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6228

           Summary: [Enter] key behavior varies when manually typing
                    display filters.
           Product: Wireshark
           Version: 1.7.x (Experimental)
          Platform: x86
        OS/Version: Windows Vista
            Status: NEW
          Severity: Minor
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: Jim@xxxxxxxxxxxxxxxxx


Build Information:
Version 1.7.0-SVN-38438 (SVN Rev 38438 from /trunk)

Copyright 1998-2011 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.22.1, with Cairo 1.10.2, with Pango 1.28.3, with
GLib 2.26.1, with WinPcap (version unknown), with libz 1.2.5, without POSIX
capabilities, with threads support, without libpcre, with SMI 0.4.8, with
c-ares
1.7.1, with Lua 5.1, without Python, with GnuTLS 2.10.3, with Gcrypt 1.4.6,
with
MIT Kerberos, with GeoIP, with PortAudio V19-devel (built Aug  9 2011), with
AirPcap.

Running on 32-bit Windows Vista Service Pack 2, build 6002, with WinPcap
version
4.1.2 (packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch
1_0_rel0b (20091008), GnuTLS 2.10.3, Gcrypt 1.4.6, with AirPcap 4.1.1 build
1838.

Built using Microsoft Visual C++ 9.0 build 21022
--
After manually typing a display filter into the display filter field, sometimes
pressing Enter once will apply the display filter, and sometimes one has to
press Enter a second time. Whether one or two presses are required seems to
depend on which filter keywords are typed.


TO RE-CREATE:

Open any trace file or start a live capture. Type any one of the following
display filters into the Filter field, and press Enter: “arp” or “ntp” or
“eigrp” or “stp” or “snmp” or “http”. The display filter will be applied
immediately and the “Apply” button will be grayed out.

Clear the display filter field and type any one of the following display
filters into the Filter field: “ip” or “udp” or “llc” or “icmp” or “tcp” or
“cdp” or “ipx” or “ipv6” or “bootp” or “dns” or “smb”. Press Enter. The filter
will not be applied and the “Apply” button will not be grayed out. You will
have to press Enter a second time in order for the filter to be applied.

In the case of compound filters, the behavior seems to depend on which filter
keyword was typed last. For example, “smb or ntp” will be applied when Enter is
pressed once. “ntp or smb” will require Enter to be pressed twice.

The same behavior was observed on a Windows XP PC using the PortableApps
version of Wireshark.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.