Wireshark-bugs: [Wireshark-bugs] [Bug 1175] tcp.flags.syn does not filter packets correctly
Date: Mon, 23 Oct 2006 08:30:46 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1175


guy@xxxxxxxxxxxx changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|tcp.flags.syn does not      |tcp.flags.syn does not
                   |filter fackets correctly    |filter packets correctly




------- Comment #2 from guy@xxxxxxxxxxxx  2006-10-23 08:30 GMT -------
I.e., even for Boolean fields, a filter subexpression containing a field's name
tests only whether the field is *present*, so, for a Boolean field, it
evaluates as "true" if the field is present in a capture, regardless of whether
its value is true or false; you have to compare a Boolean field's value against
0 to test whether it's false or against 1 to test whether it's true.

This is by design.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.