| Bug ID |
12107
|
| Summary |
Filter ipv6.nxt != 58 is not working
|
| Product |
Wireshark
|
| Version |
2.0.1
|
| Hardware |
x86
|
| OS |
Mac OS X 10.11
|
| Status |
UNCONFIRMED
|
| Severity |
Major
|
| Priority |
Low
|
| Component |
Qt UI
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Created attachment 14319 [details]
filter_issue
Build Information:
Version 2.0.1 (v2.0.1-0-g59ea380 from master-2.0)
--
Hello, folks!
I'm working on IPv6 and want to filter out all udp, tcp and icmp packets from
my IPv6 traffic.
So I created filter for Wireshark:
ipv6.nxt != 6 and ipv6.nxt != 17 and ipv6.nxt != 58
But when I applied it it filtered out tcp and udp. But ICMPv6 packets
(ipv6.next = 58) haven't filtered correctly.
Actually I could reproduce this issue with tshark:
tshark -n -r ~/ipv6_eth4_new.pcap -Y 'ipv6.nxt!=58'|grep ICMP
883 66.922644 2001:7d0:e003:9::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time Exceeded
(hop limit exceeded in transit)
884 66.922644 2001:7d0:e003:9::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time Exceeded
(hop limit exceeded in transit)
885 66.930129 2001:7d0:e003:9::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time Exceeded
(hop limit exceeded in transit)
886 66.944414 2001:2000:3080:82d::2 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
887 66.958522 2001:2000:3080:82d::2 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
888 66.972543 2001:2000:3080:82d::2 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
889 66.986324 2001:2000:3080:82d::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
890 67.000256 2001:2000:3080:82d::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
891 67.014353 2001:2000:3080:82d::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
892 67.062031 2001:2000:3018:13::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
894 67.108979 2001:2000:3018:13::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
You are receiving this mail because:
- You are watching all bug changes.
