Wireshark-bugs: [Wireshark-bugs] [Bug 8263] New: Capture filter ignored when reading from stdin

Date: Sun, 27 Jan 2013 17:07:04 +0000
Bug ID 8263
Summary Capture filter ignored when reading from stdin
Classification Unclassified
Product Wireshark
Version 1.8.4
Hardware x86-64
OS Fedora
Status UNCONFIRMED
Severity Normal
Priority Low
Component TShark
Assignee [email protected]
Reporter [email protected]

Build Information:
wireshark-1.8.4-1.fc18.x86_64
--
When capture from standard in with "-i -", the specified capture filter is
ignored, and all packets are displayed (or written to outfile).

Reproducing it is easy, e.g.:

$ tcpdump -U -i eth0 -w - tcp | tshark -i - -f "not tcp"

This should never have captured any packets whatsoever, as the two filters
cancel each other out. However all TCP traffic on eth0 gets displayed.


You are receiving this mail because:
  • You are watching all bug changes.