[John Sullivan <jsethdev@xxxxxxxxxxxxxx>]

On Monday, November 16, 2020, 8:45:48 PM, Alastair Scott wrote:
> I've posted an in-depth description of the issue with logs and pcap's
> attached here: https://gitlab.com/wireshark/wireshark/-/issues/17013

It might be helpful to specify -f to your strace, as that would
capture tshark's interaction with the TCP socket (which is apparently
done in a background thread so not visible to the non-following
strace.)

John
-- 
Dead stars still burn