The issue seems to exist since 2.0:
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12230
Proposed patch is here:
https://code.wireshark.org/review/19055
Kind regards,
Peter
On Sat, Dec 03, 2016 at 10:10:01PM +0100, Peter Wu wrote:
> Hey Michael,
>
> The issue can be reproduced by changing the display filter while the
> dialog is open. I think that a tap runs twice without clearing the list
> first. (It runs once during loading, and once again during
> redissection).
>
> Kind regards,
> Peter
>
> On Sat, Dec 03, 2016 at 08:09:39AM -0500, Michael Mann wrote:
> >
> > Moshe,
> >
> > Did you ever find a solution for this? When I was working on the Export Object refactoring, I also saw this (duplicate entries) in the GUI (for SMB, not IMF), but now I can't duplicate the issue. I've even tried switching between commits that have the new Export Object refactoring and don't (in case it was "accidentally" fixed in the refactor). Still no luck.
> > If you can still duplicate it, please open a ticket in Bugzilla with the steps.
> >
> > Michael
> >
> >
> > -----Original Message-----
> > From: Moshe <me@xxxxxxxxxxxxxxx>
> > To: wireshark-dev <wireshark-dev@xxxxxxxxxxxxx>
> > Sent: Tue, Nov 1, 2016 10:36 am
> > Subject: [Wireshark-dev] Duplicate entries in tap output
> >
> >
> >
> > Hey folks,
> >
> >
> > I'm working on a new feature for Wireshark - to export IMF data as EML filse. I was able to create the menu entries, the tap, and the output EML files. But I'm having one issue: When I have the export objects dialog open (by clicking on the newly-created "Export Objects -> IMF" menu) and modify the display filter in Wireshark, the EML entries are duplicated in the export objects window.
> >
> >
> > How can I modify the dissector or tap code to avoid the duplicate entries in the export object window?
> >
> >
> > Thanks,
> > Moshe