Comment # 18
on bug 13213
from Chuck Lever
(In reply to Michael Mann from comment #17)
> Wireshark always does 2 passes over every packet (first pass is every packet
> in order, 2 pass isn't guaranteed to be in that order).
> TShark defaults to a single pass before output, which can affect dissectors
> that have state processing involving multiple packets, because not all
> packets are guaranteed to arrive in order. So when you want
> request/response data, always pass -2 to TShark.
I'll give that a try next time I use tshark. The problems I see occur with
wireshark.
You are receiving this mail because:
- You are watching all bug changes.