Ethereal-dev: [Ethereal-dev] Dissection Process

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Jasim Tariq" <jasimtariqjt@xxxxxxxxxxx>
Date: Wed, 01 Feb 2006 07:08:01 -0800
Does ethereal dissect a protocol only while doing a live capture? I am loading an old capture file and trying to observe a protocol under the TCP Protocol. I have defined a TCP port number in the sourse code of my dissector but when I load the previously captured file, Im still not able to see the protocol relating to that TCP port. Ethereal only identifies it as a TCP protocol. Therefore I am guessing that ethereal can only dissect a protocol while doing live capture. Please correct me if I'm wrong.

Thanks

Jasim