http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1110
------- Comment #12 from martin.mathieson@xxxxxxxxxxxx 2006-09-27 10:03 GMT -------
Change 19334 should fix this problem. I no longer see problems with either of
the pcap files attached to this bug.
The line in question from the tata.pcap export now reads:
<field name="tcp.analysis.duplicate_ack" showname="This is a TCP duplicate ack"
size="0" pos="34" show="" value="""/>
I notice that there is a code path where the show attribute but not the value
attribute will be written, and this happens for some of the fields from
tata.pcap, e.g.
<field name="tcp.analysis.duplicate_ack_frame" showname="Duplicate to the ACK
in frame: 1" size="0" pos="34" show="1"/>
This will be true of any "generated" field, where you can filter on the field
"field == <value>", but no actual bytes are selected in the hex pane. I don't
think anyone has complained about this though.
Please test and close this bug.
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.