https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14277
--- Comment #5 from Guy Harris <g...@alum.mit.edu> ---
(In reply to Mališa Vučinić from comment #4)
> Do you know what would cause p_get_proto_data() to fail with Wireshark but
> not with tshark?
TShark, by default, making only one pass over the packets, so that
PINFO_FD_VISITED(pinfo) is never true, and the per-packet information is
allocated?
What happens if you run TShark with the -2 option, to force it to make two
passes over the file?
--
You are receiving this mail because:
You are watching all bug changes.
___________________________________________________________________________
Sent via: Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives: https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
