[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	12107
Summary	Filter ipv6.nxt != 58 is not working
Product	Wireshark
Version	2.0.1
Hardware	x86
OS	Mac OS X 10.11
Status	UNCONFIRMED
Severity	Major
Priority	Low
Component	Qt UI
Assignee	bugzilla-admin@wireshark.org
Reporter	pavel.odintsov@gmail.com

Created attachment 14319 [details]
filter_issue

Build Information:
Version 2.0.1 (v2.0.1-0-g59ea380 from master-2.0)

--
Hello, folks!

I'm working on IPv6 and want to filter out all udp, tcp and icmp packets from
my IPv6 traffic.

So I created filter for Wireshark: 
ipv6.nxt != 6 and ipv6.nxt != 17 and ipv6.nxt != 58

But when I applied it it filtered out tcp and udp. But ICMPv6 packets
(ipv6.next = 58) haven't filtered correctly. 

Actually I could reproduce this issue with tshark:
tshark -n -r ~/ipv6_eth4_new.pcap -Y 'ipv6.nxt!=58'|grep ICMP
883  66.922644 2001:7d0:e003:9::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time Exceeded
(hop limit exceeded in transit)
884  66.922644 2001:7d0:e003:9::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time Exceeded
(hop limit exceeded in transit)
885  66.930129 2001:7d0:e003:9::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time Exceeded
(hop limit exceeded in transit)
886  66.944414 2001:2000:3080:82d::2 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
887  66.958522 2001:2000:3080:82d::2 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
888  66.972543 2001:2000:3080:82d::2 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
889  66.986324 2001:2000:3080:82d::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
890  67.000256 2001:2000:3080:82d::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
891  67.014353 2001:2000:3080:82d::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
892  67.062031 2001:2000:3018:13::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)
894  67.108979 2001:2000:3018:13::1 -> 2a03:f480:1:2::4f ICMPv6 150 Time
Exceeded (hop limit exceeded in transit)

---

      You are receiving this mail because:

• You are watching all bug changes.