[angustia@xxxxxxxxxxxxxxxxxx]

Hello,

I've been studying Wireshark's source code for a while, but there's  
something I still don't understand. It's specifically about the inner  
workings of Epan. How does one dissectors knows and decides which  
subdissector is the correct one?

Such as, how does "frame" know which "wtap_encap" is the correct one?  
Are there any probe functions around that I am missing?

Thanks,
Ramiro Polla