On Jan 16, 2010, at 10:39 AM, Kaul wrote:
> From README.developer:
> "Wireshark distinguishes between the 2 modes with the proto_tree pointer"
I'll look at rewriting that to clarify that they're not modes of operation of Wireshark, and that one must not make assumptions about when you'll be called with, or without, a protocol tree (other than "if Wireshark needs the entire tree, for whatever reason that might be, it'll pass a non-null pointer; otherwise, it might be null or it might be non-null, don't depend on either one").
> Would posting the complete code help?
Probably.