http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1175
guy@xxxxxxxxxxxx changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|tcp.flags.syn does not |tcp.flags.syn does not
|filter fackets correctly |filter packets correctly
------- Comment #2 from guy@xxxxxxxxxxxx 2006-10-23 08:30 GMT -------
I.e., even for Boolean fields, a filter subexpression containing a field's name
tests only whether the field is *present*, so, for a Boolean field, it
evaluates as "true" if the field is present in a capture, regardless of whether
its value is true or false; you have to compare a Boolean field's value against
0 to test whether it's false or against 1 to test whether it's true.
This is by design.
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.