## Summary Wireshark appears to mark NFSv2 modes for "Directory" as "Character special file". ## Sample capture file https://wiki.wireshark.org/uploads/__moin_import__/attachments/SampleCaptures/nfsv2.pcap.gz A filter like (nfs.procedure_v2 == 1) && (nfs.ftype == 2) would show all the GetAttr calls with Character Special File in the mode's value. ## Steps to reproduce The sample capture above can be viewed in Wireshark with the filter applied will show discrepancies between the type field (which is correct) and the mode name. ## What is the current bug behavior? The bit values for character special file appear to be perfectly swapped with directory in the attribute mode's parse output. In testing, it appears that the bit values are indeed correct (i.e. the recorder's NFS client in the sample is not bugged), it is only the dissector's parsing of the mode that is wrong. ## What is the expected correct behavior? The Character Special File mode name should be swapped with the Directory mode name. ## Build information ``` Version 4.4.2 (v4.4.2-0-g9947b17309f4). Compiled (64-bit) using Microsoft Visual Studio 2022 (VC++ 14.41, build 34123), with GLib 2.78.4, with Qt 6.5.3, with libpcap, with zlib 1.3.1, with zlib-ng 2.1.5, with PCRE2, with Lua 5.4.6 (with UfW patches), with GnuTLS 3.8.4 and PKCS #11 support, with Gcrypt 1.10.2-unknown, with Kerberos (MIT), with MaxMind, with nghttp2 1.62.1, with nghttp3 0.14.0, with brotli, with LZ4, with Zstandard, with Snappy, with libxml2 2.11.7, with libsmi 0.5.0, with Minizip-ng , with QtMultimedia, with automatic updates using WinSparkle 0.8.0, with AirPcap, with binary plugins. Running on 64-bit Windows 11 (23H2), build 22631, with Intel(R) Core(TM) i7-10510U CPU @ 1.80GHz (with SSE4.2), with 16144 MB of physical memory, with GLib 2.78.4, with Qt 6.5.3, with Npcap version 1.79, based on libpcap version 1.10.4, with PCRE2 10.43 2024-02-16, with c-ares 1.27.0, with GnuTLS 3.8.4, with Gcrypt 1.10.2-unknown, with nghttp2 1.62.1, with nghttp3 0.14.0, with brotli 1.0.9, with LZ4 1.9.4, with Zstandard 1.5.6, without AirPcap, with light display mode, with HiDPI, with QPA plugin "windows", with LC_TYPE=English_Singapore.utf8, binary plugins supported. ```