So Wireshark renders CoAP query options as an HTTP query string? That's a bit confusing. Should it not render it as a map?
In reading up on the Wireshark CoAP display filter, I found this also: coap.opt.ctype Content-type Character string 1.6.0 to 2.0.2
