[Ethereal-users] Display filter bug?

["Terry Shaw" <terry.shaw@xxxxxxxxxxxx>]

Hi,

 

I'm having trouble with a particular display filter:

 

(!(rtp)) && (ip.dsfield.dscp == 0x2e)

 

The idea is that I want to see all non-RTP packets in a trace that are marked with DSCP EF.

 

For some reason, this filter, when applied, as well as doing what was intended, also displays ICMP packets with DSCP 0 marking.

 

I have a similar filter for H.225 traffic (ie filtering for non-H.225 traffic marked with DSCP AF31, which works just fine:

 

(!(h225)) && (ip.dsfield.dscp == 0x1a)

 

Is this a bug?

 

 

Regards,

 

Terry

 

oooh...they make the internet for computers now -   H. Simpson.