Hi, I'm trying to register some fields within a dissector, to be able to use them in the display filter. Tried different things but none of them worked, a simple example below :
end The field doesn’t seem to be registered properly, I get “isn’t a valid display filter” “dommyprotocol.magic” is neither a field nor a protocol name, when trying to search for it. Any ideas ? Thanks asked 06 Jan ‘14, 02:50 lepolac edited 06 Jan ‘14, 02:50 |
One Answer:
two things:
Regards answered 08 Jan '14, 09:13 Kurt Knochner ♦ |
Hi, thanks for the reply. 1. yeah, typo :) 2. interestingly, I can search for the protocol name (DUMMYPROTOCOL) only in lowercase, even if defined in uppercase. Makes sense as 'tcp' work but not "TCP" for example. But regardless, it can't find the field.
O.K. I did not yet check your code, so what happens, if you define all lowercase?
UPDATE: all lowercase works on my system (Windows - Wireshark 1.10.x)
I get the same error, "dummyprotocol.magic" isn't a valid display filter: "dummyprotocol.magic" is neither a field nor a protocol name. I've got 1.8.5. interesting...
Can you please test with 1.10.x?