Wireshark mailing list archives
Fields registered to non-parent protocol (e.g. ftp and ftp-data)
From: chuck c <bubbasnmp () gmail com>
Date: Sun, 13 Jun 2021 18:54:56 -0500
Is it a typo when fields are not registered to the parent protocol or should README.dissector describe if/when this is acceptable?
From README.dissector:
"abbrev (FIELDABBREV) --------------------A string with an abbreviation of the field. The abbreviation should startwith the abbreviation of the parent protocol followed by a period as aseparator." Protocol registration is handled by creating an instance of the header_field_info struct (or an array of such structs), and calling the registration function along with the registration ID of the protocol that is the parent of the fields. A few examples: https://www.wireshark.org/docs/dfref/f/ftp.html https://www.wireshark.org/docs/dfref/r/rtmac.html https://www.wireshark.org/docs/dfref/w/wpan.html
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Fields registered to non-parent protocol (e.g. ftp and ftp-data) chuck c (Jun 13)