[prev in list] [next in list] [prev in thread] [next in thread]
List: wireshark-users
Subject: Re: [Wireshark-users] packet counter statistics for a dissector
From: Jeff Morriss <jeff.morriss.ws () gmail ! com>
Date: 2009-02-27 16:42:35
Message-ID: 49A817FB.1070005 () gmail ! com
[Download RAW message or body]
Toralf Förster wrote:
> Hello,
>
> for the attached dissector for the Lotus Notes Sametime protocol I added a
> packet counting statistics based on the Sametime Message Type.
>
> If I click at Statistics -> Sametime -> Packet Counter and define "sametime"
> as the Filter string I get a correct statistics for the attached stream :
> 6 packets total, 4 with SET_USER_STATUS, 2 CHANNEL_SEND).
>
> However if I do not define a filter string I get :
> 6 packets total, 6 CHANNEL_SEND
>
> In general it seems that only the last Sametime Message Type is used if I do
> not define a filter string. I cannot find the culprit for that :-(
FWIW this is really a developer question--it might be better asked on
the -dev list.
The usual cause for different behavior with and without a filter is that
some (necessary to operate correctly) work is being done by the
dissector inside an "if(tree)": 'tree' may be NULL if there's no filter
but it won't be if there is a filter.
___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users@wireshark.org>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request@wireshark.org?subject=unsubscribe
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic