First time here? Check out the FAQ!

Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

answered Jul 1 '2

Chuckc gravatar image

I think this is a bug. You could open a Gitlab Issue asking that it be looked into. (please add a link back to this question if you do)

For testing, opening a non-IP file (small-system-misc-ping.etl (MS ETL) Various events, ping and browser packets.) from Wiki samples with etwdump allows the field to be set.

For an IP capture, disable the ethernet protocol and see Destination column updated by Lua.