Wireshark-bugs: [Wireshark-bugs] [Bug 1459] The filter "ip.version == 6" doesn't work
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 28 Mar 2007 07:55:18 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1459





------- Comment #3 from jmayer@xxxxxxxxx  2007-03-28 07:55 GMT -------
Maybe I misunderstand things, but are you adding code to the ipv4 dissector to
display the ip.version field as ipv6.version as well? If so, I've understood
you correctly and am not happy with that:
All the L2 transport mechanisms that you mentioned have some way of
differentiating between ipv4, ipv6, ipx, appletalk etc.
The sample capture you mention has indeed WTAP_ENCAP_RAW_IP and that's broken
IMO: If you look at the list of RAW protocols, you'll only find IP, no IPX etc.
To me it looks like the people who wrote that capturing code misunderstood the
meaning/idea of RAW_IP. In case you disagree here, maybe we should take this
particular part (meaning RAW_IP) of the discussion to tcpdump-workers.
I still think that this bug should be closed as invalid.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.