ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 12184] MATE AVPL match modes "Loose" and "Every" do not wo

Date: Wed, 21 Sep 2016 11:31:42 +0000

Comment # 9 on bug 12184 from
At the moment it looks like a misunderstanding of the intended functionality.
The important point is that Every and Strict perform pair-wise matching,
returning a result AVPL with a length of at most the number of condition AVPs.

This means that a documentation update is necessary, but the functionality
should probably be preserved. Can you review the commit message at 
https://code.wireshark.org/review/17777 for inaccuracies?

As for your test cases, you have to modify it as follows for the expected
result:

    Transform show_loose {
        // Does not work because "Loose" always matches
        //Match Loose (rsp_code!100,con_type) Replace (loose=1);
        // Instead use this, it will return on a successful match:
        Match Strict (con_type) Replace (loose=1);
        Match Strict (rsp_code!100) Replace (loose=1);
    };

The Every case is now also fixed in the patch by using sorting by string value
instead of by a random memory address.


You are receiving this mail because:
  • You are watching all bug changes.