Wireshark-bugs: [Wireshark-bugs] [Bug 6137] Display filter should ignore TCP payload encapsulate
Date: Mon, 18 Jul 2011 22:23:53 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6137

Chris Maynard <christopher.maynard@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID

--- Comment #1 from Chris Maynard <christopher.maynard@xxxxxxxxx> 2011-07-18 22:23:52 PDT ---
The packet contains the "tcp.port" field and its value matches 80; therefore
the packet matches the filter.  If you don't want matches for ICMP-encapsulated
TCP packets, change your filter so it reads something like, "!icmp &&
tcp.port==80".

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.