On Sep 21, 2010, at 9:51 AM, Ronald Howe wrote: > ok Can I then use SET_ADDRESS to put the Source and Destination fields back > to the original IP address not the encapsulated Address?
We make no guarantee whatsoever that dissectors for protocols running atop the encapsulated IP will work correctly if they run with the original IP addresses rather than the encapsulated IP addresses as the source and destination network-layer addresses. See my previous message. ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <[email protected]> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe
