oval:org.mitre.oval:ste:4923

State Id: oval:org.mitre.oval:ste:4923 Version:1 
Comment: Check for version of Wireshark installed is less than or equal to 1.2.0
Type: registry_state Namespace: windows
State Details:
value:
operation:  "less than or equal" datatype:  "version"
mask:  "false" entity_check:  "all"
value:  "1.2.0"