Wireshark-dev: [Wireshark-dev] Filtering Question
From: "Jonathan S. Weissman" <[email protected]>
Date: Wed, 8 Feb 2012 06:09:54 -0800 (PST)
What's the difference between ip.src and ip.src_host (and ip.dst and ip.dst_host and ip.addr vs ip.host)?

http://www.wireshark.org/docs/dfref/i/ip.html lists one as a type "Character" and another as type "IPv4 address"

ip.dst IPv4 address Destination 1.0.0 to 1.6.5
ip.dst_host Character string Destination Host 1.0.0 to 1.6.5

They return the same results, so what exactly does the "type" do?

Jonathan S. Weissman