On Tue, 29 Jan 2008 05:01:13 -0700, Jaap wrote: > > May I offer a different proposal, based on a former colleague's bug > solving method. Since we have two (three actually) ways of expressing > Not Equal, being "!(...)" and ".. != .." and ".. NE ..", why not drop > support for the ".. != .." (and ".. NE ..") ? > This solution has the following advantages: > * It removes code i.s.o. adding hooks in the grammer.lemon or semcheck.c > or where ever this warning comes from.
very good. > * It shifts the use of the unwanted ".. != .." aways to the desired > "!(..)". ok > * The syntax (error) becomes apparent when editing the expression, not > when applying it. yes. > * We could even keep ".. NE .." around for the power users. Actually, we need it for a lot more than power users. Herein lies the issue: while != and NE may work counterintuitively (at first) for many uses when used with ip.addr and other multiply-occuring fields, they are neceessary and proper for fileds like TTL. It would not be good to get rid of that functionality. > This solution has the following disadvantages: > * It drops an operator where people are used to. Yes. > * Display filter generators may need to be changed > * Color display filters may become invalid. Yes. We'd need or want to build a converter. After the first time I used ip.addr != <something> and the issue was explained, the problem went away for me. Maybe we need a hyperlink "Didn't get what you expected?" after a filter is applied that points one to the issue. Personally, it is no problem to conver the thinking "if no ip address equals 1.2.3.4" to "!ip.addr == 1.2.3.4". --john -- John McDermott, CPLP, CCP Learning and Performance Consultant jjm at jkintl.com www.jkintl.com V: +1 575/377-6293 Please call for fax access. _______________________________________________ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev