Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 6470] tshark badly interprets RFC2554 (SMTP authentication

Date: Fri, 21 Oct 2011 08:20:08 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6470

Michael Mann <mmann78@xxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mmann78@xxxxxxxxxxxx

--- Comment #5 from Michael Mann <mmann78@xxxxxxxxxxxx> 2011-10-21 08:20:07 PDT ---
(In reply to comment #0)
> Maybe same solution would be sufficient in case of bug no. 6446 (IMAP display
> filter) and maybe other protocols - after all, without using display filters &
> field names, tshark decodes protocol correctly and for lot of cases (including
> my own) it is sufficient, I only want display some additional fields from
> TCP/IP/Ethernet layer.

"tshark decodes protocol correctly" means you like what's currently populated
for the Info column on Wireshark?  Hopefully the additional filters will help,
but for SMTP I'm not sure what should be in the Info column vs. available via
filters.  The Info column has some "formatting" that isn't currently part of
any display filter field.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.