It seems that all other port numbers (at least the ones that I worked with) are Ok. But, I cannot filter out based on this port number. Why? I tested with version 2.4.5 and 2.2.6.
61883 appears to be a protocol name also (declared in packet-ieee1722.c) which confuses the filtering engine. We should probably rename it to avoid the collision.
Until we fix the code (I will upload a patch very shortly) you can workaround the issue by typing the port number in hexadecimal (tcp.port==0xf1bb).
If it helped you, please consider marking the answer as correct by clicking on the check mark icon.
The collision with the IEC 61883 protocol is now fixed, and the change will be part of Wireshark 2.4.8 and 2.6.2 once released. Thanks for the report.
Asked: 2018-05-23 18:59:36 +0000
Seen: 472 times
Last updated: May 23 '18
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
What exact filter are you attempting to apply?
"tcp.port == 61883". It works with any other port number, but not 61883