On Wed, Feb 20, 2002 at 11:53:53PM +1100, Ronnie Sahlberg wrote: > As i stated earlier, > tethereal is stateful, i.e. in order to dissect quite a lot of different > protocols it must remember stuff between packets.
Of course, if you're just using "-w" and not using a read filter, it doesn't bother dissecting the packets. Unfortunately, I think he's *not* using "-w", but is piping the text output of Tethereal to some flavor of grep, so it does have to dissect the packets.
