Wireshark-bugs: [Wireshark-bugs] [Bug 8529] tshark does not decode field icmp.resp_in while Wire

Date: Wed, 27 Mar 2013 16:16:35 +0000

changed bug 8529

What Removed Added
CC   [email protected]

Comment # 3 on bug 8529 from
I have a patch for bug 8223, which also fixes this bug's issue.  The patch
currently uses a new '-Y <display_filter>" option, instead of the "-R
<read_filter>" option.  

As such, this is what it shows for your pcap file:

MacBook-2:wireshark3 hadrielk$ ./tshark -Y "icmp.resp_in" -r
bug_icmp_resp_in.pcapng
  1 0.000000000 0.000000000 192.168.2.22 -> 173.194.35.191 ICMP Echo (ping)
request  id=0x0001, seq=386/33281, ttl=128 (reply in 2)
  3 1.000407000 0.952908000 192.168.2.22 -> 173.194.35.191 ICMP Echo (ping)
request  id=0x0001, seq=387/33537, ttl=128 (reply in 4)
  5 2.001436000 0.953583000 192.168.2.22 -> 173.194.35.191 ICMP Echo (ping)
request  id=0x0001, seq=388/33793, ttl=128 (reply in 6)
  8 4.003549000 1.001030000 192.168.2.22 -> 173.194.35.191 ICMP Echo (ping)
request  id=0x0001, seq=390/34305, ttl=128 (reply in 9)


You are receiving this mail because:
  • You are watching all bug changes.