diff options
| author | Gerald Combs <gerald@wireshark.org> | 2014-04-08 12:21:01 -0700 |
|---|---|---|
| committer | Gerald Combs <gerald@wireshark.org> | 2014-04-08 19:24:13 +0000 |
| commit | 84a57cb2ebd2b9c7605bf56395d19d3be0a5feea (patch) | |
| tree | f47561139d5e714ad8cf60b612b88fc50a09fe29 /dfilters | |
| parent | 07ee5de75cc07a869dee294c2294f2a03dfc381c (diff) | |
| download | wireshark-84a57cb2ebd2b9c7605bf56395d19d3be0a5feea.tar.gz | |
The "not DNS" filter used UDP in the description but matched against
TCP. DNS runs over both so update the filter to exclude both.
Thanks to Yaron Fainstein for noticing this.
Change-Id: I0c4d1fef7f8d725bf656cca87ba5908893fff0b2
Reviewed-on: https://code.wireshark.org/review/1028
Reviewed-by: Gerald Combs <gerald@wireshark.org>
Diffstat (limited to 'dfilters')
| -rw-r--r-- | dfilters | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -8,7 +8,7 @@ "IPX only" ipx "TCP only" tcp "UDP only" udp -"UDP port isn't 53 (not DNS), don't use != for this!" !(tcp.port == 53) +"Non-DNS" !(udp.port == 53 || tcp.port == 53) "TCP or UDP port is 80 (HTTP)" tcp.port == 80 || udp.port == 80 "HTTP" http "No ARP and no DNS" not arp and !(udp.port == 53) |