Wireshark-bugs: [Wireshark-bugs] [Bug 12107] New: Filter ipv6.nxt != 58 is not working

Date: Wed, 10 Feb 2016 15:58:48 +0000
Bug ID 12107
Summary Filter ipv6.nxt != 58 is not working
Product Wireshark
Version 2.0.1
Hardware x86
OS Mac OS X 10.11
Status UNCONFIRMED
Severity Major
Priority Low
Component Qt UI
Assignee [email protected]
Reporter [email protected]

Created attachment 14319 [details]
filter_issue

Build Information:
Version 2.0.1 (v2.0.1-0-g59ea380 from master-2.0)

--
Hello, folks!

I'm working on IPv6 and want to filter out all udp, tcp and icmp packets from
my IPv6 traffic.

So I created filter for Wireshark: 
ipv6.nxt != 6 and ipv6.nxt != 17 and ipv6.nxt != 58

But when I applied it it filtered out tcp and udp. But ICMPv6 packets
(ipv6.next = 58) haven't filtered correctly. 

Actually I could reproduce this issue with tshark:
tshark -n -r ~/ipv6_eth4_new.pcap -Y 'ipv6.nxt!=58'|grep ICMP
883  66.922644 2001:7d0:e003:9::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time Exceeded
(hop limit exceeded in transit)
884  66.922644 2001:7d0:e003:9::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time Exceeded
(hop limit exceeded in transit)
885  66.930129 2001:7d0:e003:9::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time Exceeded
(hop limit exceeded in transit)
886  66.944414 2001:2000:3080:82d::2 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
887  66.958522 2001:2000:3080:82d::2 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
888  66.972543 2001:2000:3080:82d::2 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
889  66.986324 2001:2000:3080:82d::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
890  67.000256 2001:2000:3080:82d::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
891  67.014353 2001:2000:3080:82d::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
892  67.062031 2001:2000:3018:13::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
894  67.108979 2001:2000:3018:13::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)


You are receiving this mail because:
  • You are watching all bug changes.