Wireshark mailing list archives
Info column with multiple PDUs in one frame
From: Thomas Wiens <th.wiens () gmx de>
Date: Wed, 25 Oct 2017 18:08:57 +0200
Hi, is there a common way or best practice of how to add information to the info column, when there are multiple independent PDUs inside a frame possible? Currently I'm first cleaning out the info column with: col_clear(pinfo->cinfo, COL_INFO); But at the protocol I'm working on (s7comm), it's possible to have multiple PDUs inside one frame. So if you only look at the info column, you'd think there is only one PDU in this frame (see attachement s7comm-multi-pdu.png), which I think is not the best way to do this. But, if it's a TCP reassembled frame, then clearing the info column seems not to work. In this case the info-additions from both PDUs are shown (see attachement s7comm-multi-pdu-with-tcp-reassembling.png). Is there a way to detect if the info column has entries from my protocol, and then instead of wiping the column out, attaching "/" or anything like that? -- Cheers Thomas Wiens
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Info column with multiple PDUs in one frame Thomas Wiens (Oct 25)
- Re: Info column with multiple PDUs in one frame Jeff Morriss (Oct 25)
- Re: Info column with multiple PDUs in one frame Thomas Wiens (Oct 25)
- Re: Info column with multiple PDUs in one frame Pascal Quantin (Oct 25)
- Re: Info column with multiple PDUs in one frame Thomas Wiens (Oct 25)
- Re: Info column with multiple PDUs in one frame Jeff Morriss (Oct 25)