Wireshark-users: Re: [Wireshark-users] packet counter statistics for a dissector

From: Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx>
Date: Sat, 28 Feb 2009 17:58:40 -0700

On Fri, Feb 27, 2009 at 11:42:35AM -0500, Jeff Morriss wrote:

> The usual cause for different behavior with and without a filter is 
> that some (necessary to operate correctly) work is being done by the 
> dissector inside an "if(tree)": 'tree' may be NULL if there's no 
> filter but it won't be if there is a filter.

.. and for thsoe who don't know, when coloring rules or custom columns 
are in use, tree != NULL.


Steve