Wireshark mailing list archives
Re: Is "tcp.len < -1" a valid display filter?
From: Stig Bjørlykke <stig () bjorlykke org>
Date: Fri, 28 Oct 2011 19:45:20 +0200
On Fri, Oct 28, 2011 at 7:06 PM, Stephen Fisher <steve () stephen-fisher com> wrote:
On Fri, Oct 28, 2011 at 09:00:59AM +0200, Stig Bjørlykke wrote:The previously attached patch does check for signed/unsigned issues, and will mark the filter as bad/red. I think it would be nice to check all values if they are valid for the given field.Good idea. I wonder how much work that would be... never thought of that.
It's pretty simple to do in ftype-integer.c (I already have the code), but we will get an error message from mk_fvalue_from_val_string() stating that "<hfinfo->abbrev> cannot accept strings as values" because we indicate an error when converting the value. I'm not sure how we can avoid this yet. The checks will introduce more conversions from string to integer, but that may not be an issue? -- Stig Bjørlykke ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Is "tcp.len < -1" a valid display filter? Stig Bjørlykke (Oct 26)
- Re: Is "tcp.len < -1" a valid display filter? Stephen Fisher (Oct 27)
- Re: Is "tcp.len < -1" a valid display filter? Stig Bjørlykke (Oct 28)
- Re: Is "tcp.len < -1" a valid display filter? Stephen Fisher (Oct 28)
- Re: Is "tcp.len < -1" a valid display filter? Stig Bjørlykke (Oct 28)
- Re: Is "tcp.len < -1" a valid display filter? Guy Harris (Oct 28)
- Re: Is "tcp.len < -1" a valid display filter? Stig Bjørlykke (Oct 28)
- Re: Is "tcp.len < -1" a valid display filter? Stephen Fisher (Oct 27)