ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 12810] New: Invalid filter: Protocol (“fc”) cannot appear

Date: Thu, 01 Sep 2016 08:57:49 +0000
Bug ID 12810
Summary Invalid filter: Protocol (“fc”) cannot appear on right-hand side of comparison.
Product Wireshark
Version 2.2.0
Hardware All
OS All
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Build Information:
Wireshark 2.3.0 (v2.3.0rc0-502-g717215d from master)
--
The display filter “tcp contains fc” gives the following error message because
we handle “fc” as a protocol instead of hex, like we do for other hex values.

  Invalid filter: Protocol (“fc”) cannot appear on right-hand side of
comparison.

This error message is difficult to understand because the display filter “tcp
contains fb” and “tcp contains fd” works as expected.

If a protocol or a field is not supported on right-hand side then we should not
handle the right-hand side as a protocol or field for the “contains” and
“matches” operator.  Maybe just as bytes, like when using quotes.


You are receiving this mail because:
  • You are watching all bug changes.