The "not DNS" filter used UDP in the description but matched against

TCP. DNS runs over both so update the filter to exclude both.

Thanks to Yaron Fainstein for noticing this.

Change-Id: I0c4d1fef7f8d725bf656cca87ba5908893fff0b2
Reviewed-on: https://code.wireshark.org/review/1028
Reviewed-by: Gerald Combs <gerald@wireshark.org>
This commit is contained in:
Gerald Combs 2014-04-08 12:21:01 -07:00
parent 07ee5de75c
commit 84a57cb2eb
1 changed files with 1 additions and 1 deletions

View File

@ -8,7 +8,7 @@
"IPX only" ipx
"TCP only" tcp
"UDP only" udp
"UDP port isn't 53 (not DNS), don't use != for this!" !(tcp.port == 53)
"Non-DNS" !(udp.port == 53 || tcp.port == 53)
"TCP or UDP port is 80 (HTTP)" tcp.port == 80 || udp.port == 80
"HTTP" http
"No ARP and no DNS" not arp and !(udp.port == 53)