Hi, In wireshark there are two expert_tapdata_t, one defined in expert_comp_table.h, second in expert_dlg.c. There're some memory issues nicely described in https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2504#c3 (with quick&dirty patch) Could someone look at it? Cheers.