Wireshark "Decode As"

[João Valverde <joao.valverde () tecnico ulisboa pt>]

Hi,

I'm trying to understand and troubleshoot some "Decode As" issues. To 
give an example consider the packet:

IPv6 | IPv6 | UDP

Wouldn't the second IPv6 layer overwrite the Decode As protocol number 
for the first layer, giving:

IPv6 (Decode IP protocol 17 As:) | IPv6 (Decode IP protocol  17 As:) | UDP

Instead of the correct:

IPv6 (Decode IP protocol 41 As:) | IPv6 (Decode IP protocol 17 As:) | UDP

Is this a bug, a known limitation of the current code, or just my 
misunderstanding?

I don't think it is specific to IPv6, it's just an example. If it is a 
limitation it seems the Decode As proto_value() interface needs to be 
extended somehow, feedback very welcome.

Thanks,

João V.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request () wireshark org?subject=unsubscribe