Ask Your Question

I cannot enter a filter for tcp port 61883. What is so special about this number?

asked 2018-05-23 18:59:36 +0000

Shahbaz gravatar image

It seems that all other port numbers (at least the ones that I worked with) are Ok. But, I cannot filter out based on this port number. Why? I tested with version 2.4.5 and 2.2.6.

edit retag flag offensive close merge delete


What exact filter are you attempting to apply?

cmaynard gravatar imagecmaynard ( 2018-05-23 19:28:24 +0000 )edit

"tcp.port == 61883". It works with any other port number, but not 61883

Shahbaz gravatar imageShahbaz ( 2018-05-23 19:29:50 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted

answered 2018-05-23 19:36:40 +0000

Pascal Quantin gravatar image

61883 appears to be a protocol name also (declared in packet-ieee1722.c) which confuses the filtering engine. We should probably rename it to avoid the collision.

edit flag offensive delete link more


I am not super familiar with the filtering engine. But, does that mean I cannot do that with the compiled Windows version?

Shahbaz gravatar imageShahbaz ( 2018-05-23 19:40:00 +0000 )edit

Until we fix the code (I will upload a patch very shortly) you can workaround the issue by typing the port number in hexadecimal (tcp.port==0xf1bb).

Pascal Quantin gravatar imagePascal Quantin ( 2018-05-23 19:57:38 +0000 )edit

Thanks. That was really helpful :)

Shahbaz gravatar imageShahbaz ( 2018-05-23 19:58:58 +0000 )edit

If it helped you, please consider marking the answer as correct by clicking on the check mark icon.

Pascal Quantin gravatar imagePascal Quantin ( 2018-05-23 20:00:59 +0000 )edit

The collision with the IEC 61883 protocol is now fixed, and the change will be part of Wireshark 2.4.8 and 2.6.2 once released. Thanks for the report.

Pascal Quantin gravatar imagePascal Quantin ( 2018-05-24 11:38:05 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2018-05-23 18:59:36 +0000

Seen: 471 times

Last updated: May 23 '18