Wireshark-bugs: [Wireshark-bugs] [Bug 11959] New: tshark -z conv, type[, filter] swapped frame /
Date: Mon, 04 Jan 2016 15:19:41 +0000
Bug ID 11959
Summary tshark -z conv,type[,filter] swapped frame / byte values from / to columns
Product Wireshark
Version 2.0.1
Hardware x86-64
OS Windows Server 2012
Status CONFIRMED
Severity Major
Priority Low
Component TShark
Assignee bugzilla-admin@wireshark.org
Reporter alex.sta@tiscali.it

Build Information:
TShark (Wireshark) 2.0.1 (v2.0.1-0-g59ea380 from master-2.0)
--
For UDP and TCP conversations details reported in "from" (i.e. <- Frame Bytes)
and "to" (i.e. -> Frame Bytes) columns are respectively swapped.

The same is NOT true for TShark 1.12.9 (v1.12.9-0-gfadb421 from master-1.12).

Example

tshark.exe -z conv,tcp -z conv,udp -r "<file.PCAP>" > "<file.log>"

Expected values (TShark 1.12.9 (v1.12.9-0-gfadb421 from master-1.12))
|       <-      | |       ->      |
| Frames  Bytes | | Frames  Bytes |
  X       Y         Z       K


Returned values (TShark (Wireshark) 2.0.1 (v2.0.1-0-g59ea380 from master-2.0))
|       <-      | |       ->      |
| Frames  Bytes | | Frames  Bytes |
  Z       K         X       Y


Many thanks in advance,
Kindest regards,
 Alex


You are receiving this mail because:
  • You are watching all bug changes.