Wireshark-bugs: [Wireshark-bugs] [Bug 8263] New: Capture filter ignored when reading from stdin
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sun, 27 Jan 2013 17:07:04 +0000
Bug ID 8263
Summary Capture filter ignored when reading from stdin
Classification Unclassified
Product Wireshark
Version 1.8.4
Hardware x86-64
OS Fedora
Status UNCONFIRMED
Severity Normal
Priority Low
Component TShark
Assignee bugzilla-admin@wireshark.org
Reporter tore@fud.no 

Build Information:
wireshark-1.8.4-1.fc18.x86_64
--
When capture from standard in with "-i -", the specified capture filter is
ignored, and all packets are displayed (or written to outfile).

Reproducing it is easy, e.g.:

$ tcpdump -U -i eth0 -w - tcp | tshark -i - -f "not tcp"

This should never have captured any packets whatsoever, as the two filters
cancel each other out. However all TCP traffic on eth0 gets displayed.

You are receiving this mail because:
  • You are watching all bug changes.