Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] Duplicate fields

From: Dario Lombardo <lomato@xxxxxxxxx>
Date: Thu, 2 May 2019 11:18:39 +0200
Hi
I'm working on bug 15719 (duplicate fields in elastic-mapping report). I've found some fields that are duplicated in the fields list. A couple of examples:

_ws.type_length.mismatch

This field is registered as ei as PI_ERROR and PI_WARN. This makes sense to me. This however raises an error when importing the mapping file into elastic, and requires some action.

ieee17221.message_type

This is registered twice into hf_acmp_message_type and hf_aecp_message_type. Is it correct to have multiple registration for the same field? If that's correct, a solution, specific for elasticsearch, should be found, then.
Thanks,
Dario.

--
Naima is online.