display filter: restore comparision of fields.

like:
  udp.srcport == udp.dstport
  frame.cap_len != frame.len
(probably you can use it for better ones)

part of bug #7263


svn path=/trunk/; revision=43069
This commit is contained in:
Jakub Zawadzki 2012-06-04 14:45:50 +00:00
parent 11e584f4cf
commit 6fff7c61f0
2 changed files with 3 additions and 2 deletions

View File

@ -497,7 +497,7 @@ dfw_gencode(dfwork_t *dfw)
/* move constants after registers*/
if (dfw->first_constant == -1) {
/* NONE */
dfw->first_constant = 0;
dfw->first_constant = dfw->next_register;
return;
}

View File

@ -1111,9 +1111,10 @@ header_field_info *hfinfo;
if (stnode_type_id(st_arg2) == STTYPE_FIELD) {
hfinfo = (header_field_info*)stnode_data(st_arg2);
if (hfinfo->type == FT_PROTOCOL)
if (hfinfo->type == FT_PROTOCOL) {
dfilter_fail("Protocol (\"%s\") cannot appear on right-hand side of comparison.", hfinfo->abbrev);
THROW(TypeError);
}
}
switch (stnode_type_id(st_arg1)) {