ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] tshark option for reassembled fragment output

From: Hadriel Kaplan <HKaplan@xxxxxxxxxxxxxx>
Date: Wed, 27 Mar 2013 15:42:47 +0000
On Mar 27, 2013, at 8:52 AM, Evan Huus <eapache@xxxxxxxxx> wrote:

> We just got another bug on what I believe is exactly the same issue:
> 
> https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8529
> 
> Do we have at least a rough consensus on what the correct behaviour is?

I've had a patch sitting in my harddrive for a couple weeks.  Right now it's using '-Y <display_filter>' as the option.
I didn't submit it because I was waiting for rough consensus on the command option.

I'll try running it with the pcap attached to the bug above to see if it resolves that issue.

-hadriel