Wireshark mailing list archives

protocol dissector: little endian ethernet address


From: Mike Ryan <mikeryan () isecpartners com>
Date: Tue, 5 Feb 2013 14:07:02 -0800

I am working on a protocol dissector for Bluetooth Low Energy. The link
layer header includes ethernet addresses, but they are little-endian. Is
it possible to have Wireshark display them properly?

Here is what I have so far:

    
http://sourceforge.net/p/libbtbb/code/ci/18965c19d5a3c1b495c40fb13fed71197918e643/tree/wireshark/plugins/btle/packet-btle.c#l114

The code reads:

    const guint8 *adv_addr, *init_addr;

    adv_addr = tvb_get_ptr(tvb, offset, 6);
    SET_ADDRESS(&pinfo->src, AT_ETHER, 6, adv_addr);
    init_addr = tvb_get_ptr(tvb, offset+6, 6);
    SET_ADDRESS(&pinfo->dst, AT_ETHER, 6, init_addr);

    proto_tree_add_ether(tree, hf_btle_adv_addr, tvb, offset, 6, adv_addr);
    proto_tree_add_ether(tree, hf_btle_init_addr, tvb, offset + 6, 6, init_addr);

[Please reply-all, as I am not on-list]

Attachment: signature.asc
Description: Digital signature

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: