Wireshark-dev: Re: [Wireshark-dev] [Bug 11461] Additional (bogus) expert items with Wireshark c
From: Joerg Mayer <[email protected]>
Date: Sat, 22 Aug 2015 19:47:36 +0200
On Sat, Aug 22, 2015 at 09:53:49AM +0000, [email protected] wrote:
> https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11461
> --- Comment #4 from Alexis La Goutte <[email protected]> ---
> the expert info is on if(tree) check ?

OK, this showed me that I have yet to understand the main disection loops.
I always assumed that running tshark with -2 would make the dissection
behaviour of tshark and wireshark the same. This obviously isn't the case.
Would someone be willing to explain the differences between
wireshark, tshark and tshark -2?
In case we want to be able to use tshark for regression testing, would it
make sense to add a mode where it uses the same mode as wireshark?

Joerg Mayer                                           <[email protected]>
We are stuck with technology when what we really want is just stuff that
works. Some say that should read Microsoft instead of technology.