strange behaviour of socketdump.exe with ip/ipv6 filter

[TsXor]

gsudo socketdump.exe "ip or ipv6"
gsudo socketdump.exe "not ip and not ipv6"
gsudo socketdump.exe "ip"
gsudo socketdump.exe "ipv6"

fails to show socket events

gsudo socketdump.exe "not ip or not ipv6"
gsudo socketdump.exe "not ip"
gsudo socketdump.exe "not ipv6"

can show socket events

[basil00]

It seems that ip and ipv6 are broken for the SOCKET layer. The problem seems to be here, where the filter determines whether ip/ipv6 holds based on whether there is a IP(v6) header or not, but this only makes sense for the NETWORK layer.