Wireshark-bugs: [Wireshark-bugs] [Bug 3799] display filter "tcp.flags.reset" not working as expe
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Fri, 31 Jul 2009 07:46:39 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3799





--- Comment #3 from Jim Young <jyoung@xxxxxxx>  2009-07-31 07:46:38 PDT ---
This is not a bug.

The filter "tcp.flags.reset" can be thought of as a presence filter: 
   "Does the packet have a tcp.flags.reset field?"  

The tcp.flags.reset bit, whether it is set or not, is present in the TCP
header.  

A presence filter doesn't care what the actual value that field contains, just
that it has one.

In comment #2 you used probably the most direct way to find a TCP packet with
the RST bit set.  There are other ways as well (like the filter you used in
comment #1).


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.