Ethereal-dev: Re: [ethereal-dev] Syntax for capture filter (Truth in advertising?)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Ben Fowler <wapdev@xxxxxxxxxxxx>
Date: Tue, 20 Jun 2000 06:05:53 +0100


> Since compatibility with tcpdump is a useful feature and starting
> point, I am not suggesting that case sensitivity be changed;

So are you saying that tcpdump *did*, or *didn't*, accept

        tcp port 80 OR tcp port 3128

with upper-case "OR"?


Didn't.

The fault was mine through and through.

You (and Gilbert) are right about this and everything else. I suspect that
I changed the lower case or to upper case in a well meaning but incorrect
attempt to correct something else (see notes about one wrong parse causing
subsequent parses to be reported as errors).

I then gave the lower case string to tcpdump. After several attempts (mind)
the lower case version worked in ethereal & I realised what I had done.

My conclusions apart from my being an idiot.

1) The documentation should stress that boolean operators must be lower
case;

2) People should be even more particular about testing filters and restarting
ethereal.

Let my case be a warning to others.

Ben.


--
Leedsnet - The information resource for Leeds and the West Riding
< URL:http://www.leedsnet.com/mobile/ >