Does it reuse tshark/libwireshark dissectors, or is this a from-scratch parser? The former is the only version I'd trust on a live capture.