Wireshark-users: Re: [Wireshark-users] filter for jpeg can not use

From: chuck c <bubbasnmp@xxxxxxxxx>
Date: Mon, 15 Jun 2020 12:18:28 -0500
Looks like time to move this to Bugzilla - https://bugs.wireshark.org/bugzilla/
If you could include a brief description there and include a link back to the screen shots here (https://www.wireshark.org/lists/wireshark-users/202006/msg00004.html)

 206                 offset += 1;
 207                 w = tvb_get_guint8(tvb, offset) * 8;
 208                 proto_tree_add_uint(main_hdr_tree, &hfi_rtp_jpeg_main_hdr_width, tvb, offset, 1, w);
 209                 offset += 1;
 210                 h = tvb_get_guint8(tvb, offset) * 8;
 211                 proto_tree_add_uint(main_hdr_tree, &hfi_rtp_jpeg_main_hdr_height, tvb, offset, 1, h);
 212                 offset += 1;

On Mon, Jun 15, 2020 at 12:31 AM damker <damker@xxxxxxxx> wrote:
the unit of measurement for this filter is confused.
such as "jpeg.main_hdr.width == 80", it means "the original value is 80 (means 640 pixels) " or "the transform value (pixels) is 80 " ?
if it means the original value, the max value should be 255.
if it means the transform valuethe max value should not be 255 

i had did some test,when i use "jpeg.main_hdr.width == 80", it display blank, 
when i use "jpeg.main_hdr.width > 255", the message with 640 pixels(the original value is 80 ) displayed,
it mean that the filter is "the transform value".









damker

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe