I was under the impression that filtering actually passed in a non-null tree if there are filter expressions such udp.length (and protocol names like udp use tree=NULL, because the code to update the protocol column will handle that just fine. The proto_tree is the only place where the filter expressions (non protocol name) are ever passed to the core of ethereal.
Ronnie Sahlberg wrote: > You should ALWAYS do a dissection. > You may skip creating the subtree item if tree is NULL but you should still > dissect all > fields. > Othervise, filtering will not work properly. > > _______________________________________________ > Ethereal-dev mailing list > [EMAIL PROTECTED] > http://www.ethereal.com/mailman/listinfo/ethereal-dev
