Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
Bug 614696 - ip.addr filter does not work
ip.addr filter does not work
Status: CLOSED NOTABUG
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: wireshark (Show other bugs)
5.4
All Linux
low Severity medium
: rc
: ---
Assigned To: Jan Safranek
BaseOS QE Security Team
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2010-07-14 22:46 EDT by Hushan Jia
Modified: 2010-07-19 07:29 EDT (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2010-07-19 07:29:11 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Hushan Jia 2010-07-14 22:46:12 EDT
Description of problem:
apply the filter "http and ip.addr != 10.16.36.52", the result list still contains packet from or dsted 10.16.36.52.

Version-Release number of selected component (if applicable):
wireshark-1.0.8-1.el5_3.1

How reproducible:


Steps to Reproduce:
1. run wireshark, and start capture on interface
2. filter by ip address
3.
  
Actual results:


Expected results:
Should not there be any packet with src or dst address is 10.16.36.52 in the result list.

Additional info:
Comment 1 Hushan Jia 2010-07-14 22:47:36 EDT
http and (ip.addr != 10.16.36.52) is the problematic filter, if I use
http and !(ip.addr == 10.16.36.52) then it works well.
Comment 2 Jan Safranek 2010-07-19 07:29:11 EDT
This is expected behavior, see http://wiki.wireshark.org/DisplayFilters.

Note You need to log in before you can comment on or make changes to this bug.