[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	11959
Summary	tshark -z conv,type[,filter] swapped frame / byte values from / to columns
Product	Wireshark
Version	2.0.1
Hardware	x86-64
OS	Windows Server 2012
Status	CONFIRMED
Severity	Major
Priority	Low
Component	TShark
Assignee	bugzilla-admin@wireshark.org
Reporter	alex.sta@tiscali.it

Build Information:
TShark (Wireshark) 2.0.1 (v2.0.1-0-g59ea380 from master-2.0)
--
For UDP and TCP conversations details reported in "from" (i.e. <- Frame Bytes)
and "to" (i.e. -> Frame Bytes) columns are respectively swapped.

The same is NOT true for TShark 1.12.9 (v1.12.9-0-gfadb421 from master-1.12).

Example

tshark.exe -z conv,tcp -z conv,udp -r "<file.PCAP>" > "<file.log>"

Expected values (TShark 1.12.9 (v1.12.9-0-gfadb421 from master-1.12))
|       <-      | |       ->      |
| Frames  Bytes | | Frames  Bytes |
  X       Y         Z       K


Returned values (TShark (Wireshark) 2.0.1 (v2.0.1-0-g59ea380 from master-2.0))
|       <-      | |       ->      |
| Frames  Bytes | | Frames  Bytes |
  Z       K         X       Y


Many thanks in advance,
Kindest regards,
 Alex

---

      You are receiving this mail because:

• You are watching all bug changes.