Wireshark · Ethereal-dev: Re: [Ethereal-dev] tethereal doesn't seem to dissect all layers

[Guy Harris <guy@xxxxxxxxxxxx>]

On Thu, Nov 27, 2003 at 02:11:29PM -0800, Michael Lum wrote:
> Is there something special I have to do to get tethereal to
> dissect all of the protocol layers in the same way as ethereal ?

That depends on what's causing it not to do so.

If you had to do a "Decode As..." to get Ethereal to dissect the
protocol in question, you'd have to use the "-d" flag in Tethereal to
achieve the same goal.

If the dissection only occurs on the second pass through the packet(s)
in question, then either

	1) there's a bug somewhere such that not enough information is
	   available in the first pass to dissect it properly

or

	2) the information in question is available in the first pass,
	   but only *after* the packet(s) in question.

In 1), you'd have to fix the bug, or supply more details so we can try
to fix it.  In 2), you're out of luck.

> I wrote a tap that is not getting called.  I don't see the protocol
> dissection happening in tethereal.

What protocol is it, and what protocols is it running atop?