Wireshark mailing list archives
Re: Duplicate fields
From: Alexis La Goutte <alexis.lagoutte () gmail com>
Date: Thu, 2 May 2019 16:54:34 +0200
Hi Dario, it is supported. It is only not recommanded (not supported ?) to have a same display field for 2 fields with different Frame Type (there is a check on Petri Dish...) On Thu, May 2, 2019 at 11:19 AM Dario Lombardo <lomato () gmail com> wrote:
Hi I'm working on bug 15719 (duplicate fields in elastic-mapping report). I've found some fields that are duplicated in the fields list. A couple of examples: _ws.type_length.mismatch This field is registered as ei as PI_ERROR and PI_WARN. This makes sense to me. This however raises an error when importing the mapping file into elastic, and requires some action. ieee17221.message_type This is registered twice into hf_acmp_message_type and hf_aecp_message_type. Is it correct to have multiple registration for the same field? If that's correct, a solution, specific for elasticsearch, should be found, then. Thanks, Dario. -- Naima is online. ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org ?subject=unsubscribe
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Duplicate fields Dario Lombardo (May 02)
- Re: Duplicate fields Alexis La Goutte (May 02)