Wireshark mailing list archives

Re: Protocol filter


From: Pascal Quantin <pascal.quantin () gmail com>
Date: Sun, 18 Sep 2016 19:12:22 +0200

Hi Paul,

2016-09-18 19:01 GMT+02:00 Paul Offord <Paul.Offord () advance7 com>:

Hi,



I am trying to get the TRANSUM post-dissector to allow a filter with the
expression “transum”.  I expect it to just display packets that have a
TRANSUM RTE Data subtree in them – which is what the LUA version does –
just like “tcp” or “http” or “tds”.  When I type the word “transum” into
the display filter box the background shows as green, but when I apply the
filter no packets are displayed.  Filter on other values in the TRANSUM RTE
Data subtree work fine e.g. transum.art>1



I’ve looked through the various README files in the doc directory but I
can’t find any mention of this.  What do I need to do to get this to work?


You need to add a line

proto_tree_add_item(tree, proto_transum, tvb, 0, -1, ENC_NA);

at the beginning of the main dissection function.




The code is available on Gerrit – change 17750.


Note that there is an issue with this changeset, that is a followup of
changeset 17757 that you abandoned, and not a full standalone patch adding
all the transum code.

Pascal.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: