https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4345
--- Comment #4 from Kirby Files <ksfiles@xxxxxxxxx> 2009-12-22 14:14:02 PST ---
(In reply to comment #3)
> I'd prefer if you used a proto_tree_add_item() for NBAR applicationId too.
Could you please help me the idiom for doing so? I was using
proto_tree_add_item() with the following registration:
{&hf_cflow_nbar_appl_id,
{"ApplicationId", "cflow.appl_id",
FT_UINT16, BASE_DEC, NULL, 0x0,
"Application ID (NBAR)", HFILL}
},
and the call:
proto_tree_add_item(pdutree, hf_cflow_nbar_appl_id,
tvb, offset, length, FALSE);
However, since the Netflow template itself claims the field as 4 bytes,
wireshark seemed to ignore my definition of the field as a 2-byte unsigned. The
only workaround I could find is to format the text myself with
proto_tree_add_text().
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
