Wireshark-bugs: [Wireshark-bugs] [Bug 11860] Display filter operator != not working as exepected
Date: Wed, 16 Dec 2015 22:41:07 +0000

Comment # 7 on bug 11860 from
(In reply to João Valverde from comment #6)
> The most natural formal interpretation would be an AND relation, which the
> operator doesn't follow anyway, for convenience.

I.e., the _expression_ {field} {op} {value} should be interpreted as "for all
instances of {field}, the relation '{value of that instance of the field} {op}
{value}' is true", rather than as "there is an instance of {field} such that
the relation '{value of that instance of the field} {op} {value}' is true"?

That would mean that "ip.addr == 192.168.0.1" would only match packets from
192.168.0.1 to 192.168.0.1; I'm not sure that would be useful.


You are receiving this mail because:
  • You are watching all bug changes.