Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 9575] "-T fields -e <field>" does only work for some field

Date: Wed, 18 Dec 2013 17:01:01 +0000

Comment # 3 on bug 9575 from
Yeah, of course I can use "-o frame.show_file_off:true" on the command line -
and that's what I'm doing now.

But again, it might be more user-friendly to set that automatically when
needed.


BTW, if the "frame.show_file_off" is FALSE, then wireshark accepts
"frame.file_off > 2000" in the filter box, but returns _no_ results (as the
result is never true). _That_'s a bug, I guess.


(I can understand that the MD5 sum shouldn't get calculated automatically, but
the file offset? Not much CPU involved, I believe. Although the same discussion
can be done for the md5 field, too.
Summary: I still think these fields should be calculated when needed.)


You are receiving this mail because:
  • You are watching all bug changes.