Wireshark mailing list archives

Info column with multiple PDUs in one frame


From: Thomas Wiens <th.wiens () gmx de>
Date: Wed, 25 Oct 2017 18:08:57 +0200

Hi,

is there a common way or best practice of how to add information to the
info column, when there are multiple independent PDUs inside a frame
possible?

Currently I'm first cleaning out the info column with:
col_clear(pinfo->cinfo, COL_INFO);

But at the protocol I'm working on (s7comm), it's possible to have
multiple PDUs inside one frame.
So if you only look at the info column, you'd think there is only one
PDU in this frame (see attachement s7comm-multi-pdu.png), which I think
is not the best way to do this.

But, if it's a TCP reassembled frame, then clearing the info column
seems not to work.
In this case the info-additions from both PDUs are shown (see
attachement s7comm-multi-pdu-with-tcp-reassembling.png).

Is there a way to detect if the info column has entries from my
protocol, and then instead of wiping the column out, attaching "/" or
anything like that?

-- 
Cheers

Thomas Wiens

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: