Wireshark · Ethereal-dev: Re: SV: [Ethereal-dev] What's changed with operational dissection?

[Ulf Lamping <ulf.lamping@xxxxxx>]

Jaap Keuter wrote:

> Still the question below remains. Why is the dissector always called with
> a tree != NULL parameter?
>  
I'm really not an expert on this, but as far as I remember:

Any time fields are probably used (filtering, coloring, ...) the tree 
will be != NULL.

Some things don't need the tree (so it will be tree == NULL) e.g. for 
the cf_retap_packets() call.

Regards, ULFL