Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: Re: [Wireshark-dev] Dissectors and parsing mode

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Fri, 7 Nov 2008 17:49:08 -0700

On Sat, Nov 08, 2008 at 12:40:03AM +0000, Chris Davies wrote:

> If I were getting a null tree pointer on the first run through, I'd 
> assume this was just how it was supposed to work and attempt to work 
> around my problems. That I'm getting a non-null pointer both times 
> does raise the possibility that I'm doing something wrong here.

You're probably running into the situation where the color filters are 
enabled.  This causes the tree to be non-null even when a packet isn't 
selected.  Turn off color filters and try again.  Simply put things that 
need to be processed at all times outside of the if(tree).


Steve


  • Follow-Ups:
    • Re: [Wireshark-dev] Dissectors and parsing mode
      • From: Chris Davies
  • References:
    • [Wireshark-dev] Dissectors and parsing mode
      • From: Chris Davies
  • Prev by Date: [Wireshark-dev] Dissectors and parsing mode
  • Next by Date: Re: [Wireshark-dev] Dissectors and parsing mode
  • Previous by thread: [Wireshark-dev] Dissectors and parsing mode
  • Next by thread: Re: [Wireshark-dev] Dissectors and parsing mode
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation