Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] asn2wrs : FIELD_RENAME

From: "Kukosa, Tomas" <tomas.kukosa@xxxxxxxxxxxxxxxxxxxxxx>
Date: Tue, 27 Oct 2009 09:02:05 +0100
If I remeber well my original idea few years ago the decision to use just ASN.1 name was because 
the user can use only ASN.1 specification and does not need to know how the field has been renamed.

I do not see using the same filter name for different fields so bad.

E.g. "h245.network" filter simply shows you all packets containig any IP address.
If you need any exact address you can simply filter "h245.network == 10.77.88.162" or "h245.network == 1:2:3::7:8:9"
If you need just multicat address the "h245.multicastAddress" can be used.

But I can see no problem to introduce new directive #.FILTER_RENAME if renamed fields are more suitable for users.

Best regards,
  Tomas

> -----Original Message-----
> From: wireshark-dev-bounces@xxxxxxxxxxxxx 
> [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of 
> Anders Broman
> Sent: Tuesday, October 27, 2009 8:30 AM
> To: Developer support list for Wireshark
> Subject: Re: [Wireshark-dev] asn2wrs : FIELD_RENAME
> 
>  
> 
> -----Original Message-----
> From: wireshark-dev-bounces@xxxxxxxxxxxxx
> [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of 
> Kukosa, Tomas
> Sent: den 27 oktober 2009 08:16
> To: Developer support list for Wireshark
> Subject: Re: [Wireshark-dev] asn2wrs : FIELD_RENAME
> 
> >Hi,
> >
> >the FIELD_RENAME directive changes just hf_name.
> 
> Yes but it would be better to change also the filter name 
> too, wouldn't
> it?
> 
> >Filter names keep ASN.1 names and there is not any directive for
> changing it (or at least I do not remeber 
> >implementing it).
> 
> It would be nice to have though :-) Using the same filter name for
> different fields isn't good...
> 
> >There were some problems with h245.network filters (see
> https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4147)
> >but it was fixed yesterday.
> >
> >Best regards,
> >  Tomas
> 
> Regards
> Anders
> 
> 
> > -----Original Message-----
> > From: wireshark-dev-bounces@xxxxxxxxxxxxx
> > [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Arun 
> > Arunachalam
> > Sent: Monday, October 26, 2009 4:48 PM
> > To: wireshark-dev@xxxxxxxxxxxxx
> > Subject: [Wireshark-dev] asn2wrs : FIELD_RENAME
> > 
> > Hi Folks,
> > 
> > Is the FIELD_RENAME supposed to also change the 
> corresponding filter 
> > name
> > (PROTOABBREV.FIELDABBREV) or is it just used to have a different 
> > hf_name?
> > 
> > Example (h245.cnf) :
> > 
> > UnicastAddress/iPAddress/network ip4_network 
> > UnicastAddress/iP6Address/network ip6_network 
> > MulticastAddress/iP6Address/network mip6_network
> > 
> > Currently the filter for the all of the above is "h245.network".
> > 
> > Thanks,
> > Arun
> > 
> > 
> > 
> > ______________________________________________________________
> > _____________
> > Sent via:    Wireshark-dev mailing list 
> <wireshark-dev@xxxxxxxxxxxxx>
> > Archives:    http://www.wireshark.org/lists/wireshark-dev
> > Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
> >              
> > mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
> > 
> ______________________________________________________________
> __________
> ___
> Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>  
> mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
> ______________________________________________________________
> _____________
> Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>              
> mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
>