Wireshark-bugs: [Wireshark-bugs] [Bug 1806] IP dissector Expert Info flags packets with a low TT
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 28 Aug 2007 20:13:32 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1806





------- Comment #6 from luis.ontanon@xxxxxxxxx  2007-08-28 20:13 GMT -------
(In reply to comment #5)
> After playing with this some more, I think the best coloring rule for Low TTL
> is this:
> 
> ip.ttl < 5 && !(ip.dst >= 224.0.0.0 && ip.dst <= 224.0.0.255)
> 

ip.ttl < 5 && !(ip.dst >= 224.0.0.0/24)

Would be not only cleaner and more insightful but even a faster filter.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.