Home page logo

wireshark logo Wireshark mailing list archives

Re: Display filter and/or precedence
From: Jakub Zawadzki <darkjames-ws () darkjames pl>
Date: Fri, 9 Aug 2013 21:32:10 +0200

On Fri, Aug 09, 2013 at 11:41:59AM -0700, Gerald Combs wrote:
Laura Chappell and Sean Walberg recently discovered that logical OR
takes precedence over logical AND in display filters. Is there any
reason we shouldn't reverse this so that we match the order of
operations elsewhere (including BPF)?

I think in BPF they have the same priority, evaluated from left to right, check dump of:

'port 333 or port 444 and host 192.168.192' same '(port 333 or port 444) and host'
'host and port 443 or port 333' same '(host and port 443) or port 333'
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]