Wireshark-bugs: [Wireshark-bugs] [Bug 9048] two pass analysis does not show any packets with som
Date: Thu, 22 Aug 2013 11:05:00 +0000

Comment # 10 on bug 9048 from
(In reply to comment #9)
> Hello Evan,
> 
> You might want to take a look at bug 8392 for some other two pass oddities. 
> It was originally closed as a duplicate of bug 8316 but I have my doubts
> that bug 8392 is actually a dup.  Bug 8392 examples #5 and #6 demonstrate
> some of the problems with frame numbering when two pass analysis is enabled
> along filtering.  Those examples might shed some light on this bug.

Hi Jim, the behaviours described in bug 8392 are expected currently (which is
why we have -Y which behaves more as you might want).

The original thinking when splitting -R and -Y was that -R would only be useful
as a pre-filter during two-pass analysis (and therefore would affect the frames
seen during the second pass, where the frame numbering occurs). -Y filters
during the second pass, so it shouldn't affect frame numbers.

If there is still some consfusion or disagreement though perhaps we should
discuss on -dev.


You are receiving this mail because:
  • You are watching all bug changes.