Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Duplicate entries in tap output

From: Peter Wu <peter@xxxxxxxxxxxxx>
Date: Sat, 3 Dec 2016 22:10:01 +0100
Hey Michael,

The issue can be reproduced by changing the display filter while the
dialog is open. I think that a tap runs twice without clearing the list
first. (It runs once during loading, and once again during
redissection).

Kind regards,
Peter

On Sat, Dec 03, 2016 at 08:09:39AM -0500, Michael Mann wrote:
> 
> Moshe,
>  
> Did you ever find a solution for this?  When I was working on the Export Object refactoring, I also saw this (duplicate entries) in the GUI (for SMB, not IMF), but now I can't duplicate the issue.  I've even tried switching between commits that have the new Export Object refactoring and don't (in case it was "accidentally" fixed in the refactor).   Still no luck.
> If you can still duplicate it, please open a ticket in Bugzilla with the steps.
> 
> Michael
>  
>  
> -----Original Message-----
> From: Moshe <me@xxxxxxxxxxxxxxx>
> To: wireshark-dev <wireshark-dev@xxxxxxxxxxxxx>
> Sent: Tue, Nov 1, 2016 10:36 am
> Subject: [Wireshark-dev] Duplicate entries in tap output
> 
> 
> 
> Hey folks,
> 
> 
> I'm working on a new feature for Wireshark - to export IMF data as EML filse. I was able to create the menu entries, the tap, and the output EML files. But I'm having one issue: When I have the export objects dialog open (by clicking on the newly-created "Export Objects -> IMF" menu) and modify the display filter in Wireshark, the EML entries are duplicated in the export objects window.
> 
> 
> How can I modify the dissector or tap code to avoid the duplicate entries in the export object window?
> 
> 
> Thanks,
> Moshe