Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Duplicate entries in tap output

From: Peter Wu <peter@xxxxxxxxxxxxx>
Date: Sun, 4 Dec 2016 00:07:00 +0100
The issue seems to exist since 2.0:
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12230

Proposed patch is here:
https://code.wireshark.org/review/19055

Kind regards,
Peter

On Sat, Dec 03, 2016 at 10:10:01PM +0100, Peter Wu wrote:
> Hey Michael,
> 
> The issue can be reproduced by changing the display filter while the
> dialog is open. I think that a tap runs twice without clearing the list
> first. (It runs once during loading, and once again during
> redissection).
> 
> Kind regards,
> Peter
> 
> On Sat, Dec 03, 2016 at 08:09:39AM -0500, Michael Mann wrote:
> > 
> > Moshe,
> >  
> > Did you ever find a solution for this?  When I was working on the Export Object refactoring, I also saw this (duplicate entries) in the GUI (for SMB, not IMF), but now I can't duplicate the issue.  I've even tried switching between commits that have the new Export Object refactoring and don't (in case it was "accidentally" fixed in the refactor).   Still no luck.
> > If you can still duplicate it, please open a ticket in Bugzilla with the steps.
> > 
> > Michael
> >  
> >  
> > -----Original Message-----
> > From: Moshe <me@xxxxxxxxxxxxxxx>
> > To: wireshark-dev <wireshark-dev@xxxxxxxxxxxxx>
> > Sent: Tue, Nov 1, 2016 10:36 am
> > Subject: [Wireshark-dev] Duplicate entries in tap output
> > 
> > 
> > 
> > Hey folks,
> > 
> > 
> > I'm working on a new feature for Wireshark - to export IMF data as EML filse. I was able to create the menu entries, the tap, and the output EML files. But I'm having one issue: When I have the export objects dialog open (by clicking on the newly-created "Export Objects -> IMF" menu) and modify the display filter in Wireshark, the EML entries are duplicated in the export objects window.
> > 
> > 
> > How can I modify the dissector or tap code to avoid the duplicate entries in the export object window?
> > 
> > 
> > Thanks,
> > Moshe