Ethereal-dev: Re: [ethereal-dev] cvs commit: ethereal packet-aarp.c

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Wed, 06 Oct 1999 00:58:12 -0500
On Tue, Oct 05, 1999 at 10:03:50PM -0700, Guy Harris wrote:
> > 	ip.proto == "IP"
> 
> Speaking of display filters, is something such as
> 
> 	ip.addr == www.sun.com

This works. Fields of type FT_IPv4 can use IP addresses or host names.

> or
> 
> 	tcp.port == dns
> 
> supposed to work?

This one, not yet. tcp.port is treated as FT_UINT16. If we can make it
have a val_string (FT_VALS_UINT16 in the current implementation), then
we should be able to resolve that just fine. And for one work strings, we
could make the quotation marks optional, so these two should be made to work:

 	tcp.port == dns
 	tcp.port == "dns"

--gilbert