One of major changes is 1.2.0 adopts lemon 1.59 (Wireshark 1.0.8 uses lemon
1.51).
I use 1.0.8 code base to do following experiments:
1. (OK) 1.0.8 from SVN (with lemon 1.51)
$ ./dftest "tcp fa"
Filter: "tcp fa"
dftest: "fa" was unexpected in this context.
2. (FAIL) 1.0.8 with lemon 1.59
$./dftest "tcp fa"
00000 CHECK_EXISTS tcp
00001 RETURN
However, I do not know why the lemon version matters.
2009/5/28 Stig Bjørlykke <[email protected]>
> Hi.
>
> The display filter syntax check is broken in 1.2.0. Try writing "tcp
> f" in both 1.0.8 and 1.2.0.
> In 1.0.8 this is marked as invalid, but in 1.2.0 it's valid. It seems
> like all trailing (bogus) data is ignored.
>
> Does anyone know what happened?
> I did not find any relevant changes in epan/dfilter/ between 1.0.8 and
> 1.2.0.
>
>
> --
> Stig Bjørlykke
> ___________________________________________________________________________
> Sent via: Wireshark-dev mailing list <[email protected]>
> Archives: http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
> mailto:[email protected]?subject=unsubscribe
>
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <[email protected]>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:[email protected]?subject=unsubscribe