Wireshark-bugs: [Wireshark-bugs] [Bug 9575] "-T fields -e <field>" does only work for some field
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 18 Dec 2013 17:28:57 +0000

Comment # 4 on bug 9575 from 
(In reply to comment #2)
> And as for packet_flags, perhaps that should default to "0" or something
> similar?

If a particular field is not present in a packet, then nothing is displayed. 
This is how all display filters work. 

(In reply to comment #3)
> BTW, if the "frame.show_file_off" is FALSE, then wireshark accepts
> "frame.file_off > 2000" in the filter box, but returns _no_ results (as the
> result is never true). _That_'s a bug, I guess.

The display filter _expression_ is still valid whether the preference is enabled
or not.  The result is never true because until the preference is enabled,
there are no packets containing that field, thus you get _no_ results.  I don't
see why this is a bug.

You are receiving this mail because:
  • You are watching all bug changes.