Wireshark mailing list archives
Re: Issue with tvbuff_t
From: Beth <beth.tridium () gmail com>
Date: Thu, 17 Dec 2009 15:23:05 -0500
Not completely sure I understand your question #1, but here's what I usually do: a) starting with the original tvbuff_t* "tvb", I process my protocol's portion of the packet b) say my protocol uses N bytes, leaving R = (tvb_length(tvb) - N) bytes for the next dissector c) I create a new tvbuff_t*: sub_tvb = tvb_new_subset( tvb, N, R, R) d) I pass sub_tvb to the next dissector On question #2, I think any valid tvbuff_t* can be used for those calls.
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Issue with tvbuff_t Varun Gupta (Dec 16)
- Re: Issue with tvbuff_t Beth (Dec 17)