Wireshark-bugs: [Wireshark-bugs] [Bug 7458] New: Double-clicking packet with comment in Expert I
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sun, 8 Jul 2012 20:51:41 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7458

           Summary: Double-clicking packet with comment in Expert Infos
                    dialog displays wrong comment when a display filter is
                    applied
           Product: Wireshark
           Version: 1.9.x (Experimental)
          Platform: x86
        OS/Version: Windows Vista
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: Jim@xxxxxxxxxxxxxxxxx


Created attachment 8755
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=8755
Screenshot showing Packet Comments with Display Filter

Build Information:
Version 1.9.0-SVN-43611 (SVN Rev 43611 from /trunk)

Copyright 1998-2012 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.24.10, with Cairo 1.10.2, with Pango 1.30.0, with
GLib 2.32.2, with WinPcap (4_1_2), with libz 1.2.5, without POSIX capabilities,
without libnl, with SMI 0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python,
with GnuTLS 2.12.18, with Gcrypt 1.4.6, with MIT Kerberos, with GeoIP, with
PortAudio V19-devel (built Jul  8 2012), with AirPcap.

Running on 32-bit Windows Vista Service Pack 2, build 6002, with WinPcap
version
4.1.2 (packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch
1_0_rel0b (20091008), GnuTLS 2.12.18, Gcrypt 1.4.6, with AirPcap 4.1.1 build
1838.

Built using Microsoft Visual C++ 10.0 build 40219
--
Double-clicking a packet in the Packet Comments tab of the Expert Infos dialog
will bring up the wrong "Edit or Add Packet Comments" dialog if there is a
display filter in place that excludes the packet that was clicked from the
Packet List display.

TO RECREATE:

Download the trace files from www.wiresharkbook.com and load
http-download-bad.pcapng. Apply the display filter "tcp.analysis.flags &&
!tcp.analysis.window_update". The first packet displayed will be number 133.
Open the Expert Infos dialog and click on the Packet Comments tab. Note that
packets 1, 2, 4, 5, 6, 44, 133, 134, 135, 136, 138, and 144 (and others if you
scroll the display) have comments, but only packets 133, 136, 138, and 144 are
visible in the Packet List display. On the Packet Comments tab, double-click
packet 2. Note that the "Edit or Add Packet Comments" dialog that opens will
have the comment for packet 133 instead of packet 2.

A screen shot is attached that illustrates this situation.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.