On Feb 12, 2013, at 2:54 AM, Graham Bloice <graham.bloice@xxxxxxxxxxxxx> wrote:
> On 12 February 2013 01:52, Guy Harris <guy@xxxxxxxxxxxx> wrote:
>
>> On Feb 11, 2013, at 5:02 PM, Hadriel Kaplan <HKaplan@xxxxxxxxxxxxxx> wrote:
>>
>> > I guess I'll just fix it and have it say "works for tshark only".
>>
>> ...but there's not even a guarantee that it'll work for TShark forever, so I changed your update to use only the post-dissector code.
>
> Doesn't the -2 parameter to tshark force the two passes?
We offer no guarantee that taps will be run on all passes that generate column information for printing/display, nor should we offer one. The right place to tweak columns is in a post-dissector, *NOT* a tap.