Wireshark-bugs: [Wireshark-bugs] [Bug 6912] New: Capture filters for higher level protocols don'
Date: Mon, 5 Mar 2012 10:22:02 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6912

           Summary: Capture filters for higher level protocols don't work
                    when there is PPP or PPPoE encapsulation
           Product: Wireshark
           Version: 1.6.5
          Platform: x86
        OS/Version: Linux (other)
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: x12ozmouse@xxxxx


Created attachment 7958
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=7958
A sample packet that is not captured when using "udp" or "ip" etc

Build Information:
Wireshark 1.6.5 (SVN Rev Unknown from unknown)

Compiled (32-bit) with GTK+ 2.20.1, with GLib 2.24.1, with libpcap (version
unknown), with libz 1.2.3.3, with POSIX capabilities (Linux), without libpcre,
with SMI 0.4.8, with c-ares 1.7.0, without Lua, without Python, with GnuTLS
2.8.5, with Gcrypt 1.4.4, with MIT Kerberos, with GeoIP, with PortAudio
V19-devel (built Feb 18 2010 22:31:30), without AirPcap.

Running on Linux 2.6.39.4, with libpcap version 1.0.0, with libz 1.2.3.3,
GnuTLS 2.8.5, Gcrypt 1.4.4.

Built using gcc 4.4.3.
--
The problem is, if there is PPP and/or PPPoE encapsulation in the packet, the
capture filter does not work on higher level protocols. For example I can't use
"ip" or "ip proto 41" or "udp" on the attached packet, it will simply not be
accepted.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.