Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 1503] SSLv2 record length and version shown wrong

[bugzilla-daemon@xxxxxxxxxxxxx]

http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1503





------- Comment #5 from sake@xxxxxxxxxx  2007-04-03 05:43 GMT -------
(In reply to comment #4)

> - highlight ssl.handshake.version -> compare frames 6, 44 & 46 which all have a
> field called ssl.handshake.version. But only frame 46 is colored.

I did two more tests with the following color-filters:

- highlight "ssl.handshake.version == 0x0002" -> Now frame 6 is properly
colored (frame 4 still uses ssl.record.version instead of
ssl.handshake.version, so it is not colored). Frames 44 & 46 are not colored,
which is also correct.

- highlight "ssl.handshake.version != 0x0001" -> Now frames 6, 44 & 46 are
indeed properly colored.

So it looks indeed that two different hf's with the same field-name can be
used, only not when that field-name is used as a filter.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.