Wireshark-dev: [Wireshark-dev] Filtering Question
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Jonathan S. Weissman" <jsw52@xxxxxxxxx>
Date: Wed, 8 Feb 2012 06:09:54 -0800 (PST)
What's the difference between ip.src and ip.src_host (and ip.dst and ip.dst_host and ip.addr vs ip.host)?

http://www.wireshark.org/docs/dfref/i/ip.html lists one as a type "Character" and another as type "IPv4 address"
 

ip.dst IPv4 address Destination 1.0.0 to 1.6.5
ip.dst_host Character string Destination Host 1.0.0 to 1.6.5

They return the same results, so what exactly does the "type" do?

 Thanks,
Jonathan S. Weissman