Wireshark · Ethereal-dev: Re: [Ethereal-dev] New field types proposal

[Ulf Lamping <ulf.lamping@xxxxxx>]

Tomas Kukosa wrote:

> I think about following new field types:
> 1) FT_UUID - Universally Unique IDentifier
>     fixed length 16 bytes
>     display format XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX

I would agree. However, as UUID's sometimes can be replaced by some sort 
of name resolution, e.g. in DCE-RPC, it might not be helpful in all 
situations.

> 2) FT_OID - ASN.1 OBJECT IDENTIFIER
>     variable length
>     dotted numeric display format (could be alternated with display 
> option)

There are a lot of different object identifiers, with lot's of different 
formats, so it's maybe not a good idea.

> 3) FT_PSTRING - conditional printable string
>     variable length
>     display format like FT_STRING if all charactes are printable, like 
> FT_BYTES if not
Could you explain this a bit more detailed?

Regards, ULFL