Comment # 3
on bug 12124
from Guy Harris
(In reply to Pascal Quantin from comment #1)
> This can be achieved with the following command line:
>
> tshark -d mpls.label==5000,pwethheuristic -nVr sample.pcap
>
> See https://www.wireshark.org/docs/man-pages/tshark.html for details.
>
> Would it serve your needs?
What if the label *isn't* 5000? What if they don't *know* what the right label
is - for example, what if they want to run TShark on a capture that nobody's
looked at yet, and have all MPLS traffic for which there's 1) no explicit
label-to-dissector binding and 2) nothing chosen by the 1st nibble logic (see
BCP 4928, RFC 4385 and 5586) as some particular default?
Before the restructuring of Decode As, you could do that. Now you can't.
You are receiving this mail because:
- You are watching all bug changes.