Ethereal-users: [Ethereal-users] Display filter bug?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Terry Shaw" <terry.shaw@xxxxxxxxxxxx>
Date: Fri, 10 Feb 2006 13:59:52 +1000
Hi,
 
I'm having trouble with a particular display filter:
 
(!(rtp)) && (ip.dsfield.dscp == 0x2e)
 
The idea is that I want to see all non-RTP packets in a trace that are marked with DSCP EF.
 
For some reason, this filter, when applied, as well as doing what was intended, also displays ICMP packets with DSCP 0 marking.
 
I have a similar filter for H.225 traffic (ie filtering for non-H.225 traffic marked with DSCP AF31, which works just fine:
 
(!(h225)) && (ip.dsfield.dscp == 0x1a)
 
Is this a bug?
 
 
Regards,
 
Terry
 
oooh...they make the internet for computers now -   H. Simpson.