Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 9938] New: tshark "-Y -w" saves non-dependent frames

Date: Sat, 29 Mar 2014 20:20:42 +0000
Bug ID 9938
Summary tshark "-Y -w" saves non-dependent frames
Classification Unclassified
Product Wireshark
Version 1.11.x (Experimental)
Hardware All
OS All
Status UNCONFIRMED
Severity Normal
Priority Low
Component TShark
Assignee [email protected]
Reporter [email protected]

Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
The fix for bug 8223 provided a new '-Y' display-filter option, which would (1)
show the packets with the frame numbers based on the full list of frames in the
capture file, and (2) save the hidden dependent frames to a written-out file if
'-w' was given.

Those both work, but (2) grabs *all* dependent frames, even those of packets
not matching the given display filter.

That's because my proposed patch in bug 8223 wasn't taken as is, but re-written
instead. :)

I'll submit a patch to fix this shortly.


You are receiving this mail because:
  • You are watching all bug changes.