ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 10142] New: Packets with Time Reference set always display

Date: Fri, 30 May 2014 02:40:00 +0000
Bug ID 10142
Summary Packets with Time Reference set always displayed regardless of display filter
Classification Unclassified
Product Wireshark
Version 1.10.7
Hardware x86
OS Windows Vista
Status UNCONFIRMED
Severity Normal
Priority Low
Component Wireshark
Assignee [email protected]
Reporter [email protected]

Build Information:
Version 1.10.7 (v1.10.7-0-g6b931a1 from master-1.10)

Copyright 1998-2014 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.24.14, with Cairo 1.10.2, with Pango 1.30.1, with
GLib 2.34.1, with WinPcap (4_1_3), with libz 1.2.5, without POSIX capabilities,
without libnl, with SMI 0.4.8, with c-ares 1.9.1, with Lua 5.1, without Python,
with GnuTLS 2.12.18, with Gcrypt 1.4.6, with MIT Kerberos, with GeoIP, with
PortAudio V19-devel (built Apr 22 2014), with AirPcap.

Running on 32-bit Windows Vista Service Pack 2, build 6002, with WinPcap
version
4.1.3 (packet.dll version 4.1.0.2980), based on libpcap version 1.0 branch
1_0_rel0b (20091008), GnuTLS 2.12.18, Gcrypt 1.4.6, with AirPcap 4.1.1 build
1838.
AMD Athlon(tm) 64 X2 Dual Core Processor 4000+, with 1917MB of physical memory.


Built using Microsoft Visual C++ 10.0 build 40219
--
Packets with a Time Reference are always displayed, regardless of whether they
match the applied display filter or not. For example, DNS packets with Time
References set will be displayed when the display filter is "tcp".

Packets with a Time Reference set will even be displayed when the display
filter is "!(frame.ref_time)", which should explicitly exclude those packets.

The display filter "!frame.number==10" will still display packet 10 if it has a
Time Reference set.


You are receiving this mail because:
  • You are watching all bug changes.