Wireshark mailing list archives
Re: [Bug 6086] How does it work?
From: Dirk Jagdmann <doj () cubic org>
Date: Tue, 02 Aug 2011 10:14:37 -0700
Well, I guess your expectations are a bit off.
1. It would work on all protocols that had a FT_ABSOLUTE_TIME item (satisfying most of bug 1381)
It changed the date parser. It should work on any FT_ABSOLUTE_TIME item.
2. Missing date/time fields in the filter would be set to 0 and considered "don't care" (ie "frame.time == 2011-08-02" would filter all frames received on Aug 2, 2011, regardless of hour/minute/second values)
missing fields are set to 0, but you still get a timestamp, meaning a point in time. If you want to display all frames captures today, you'll write a filter as "frame.time>='2011-08-02 00:00:00' && frame.time<='2011-08-02 23:59:59'" -- ---> Dirk Jagdmann ----> http://cubic.org/~doj -----> http://llg.cubic.org ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- [Bug 6086] How does it work? mmann78 (Aug 02)
- Re: [Bug 6086] How does it work? Dirk Jagdmann (Aug 02)