Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: Re: [Wireshark-dev] Byte order, hf_register_info and value displayed

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Gilbert Ramirez" <gram@xxxxxxxxxxxxxxx>
Date: Mon, 4 Dec 2006 15:06:01 -0600

The last argument of proto_tree_add_item() tells Wireshark the byte
order (endianness)... TRUE for little endian, FALSE for big endian.

--gilbert

On 12/4/06, Hal Lander <hal_lander@xxxxxxxxxxx> wrote:
In hf_register_info I declare a field to be FT_UINT16.
Then I use "proto_tree_add_item" to put it on the tree.

In the lower (3rd) pane Wireshark dispalys the two bytes in hex as;
24 00

In the middle (2nd) pane it displays the value of the field as 9216 when
what I was wanting to see was 36.

How do I get Wireshark to use the bytes in the reverse order before
calculating the unsigned 16 bit integer to display?

TIA
Hal

_________________________________________________________________
Talk now to your Hotmail contacts with Windows Live Messenger.
http://clk.atdmt.com/MSN/go/msnnkwme0020000001msn/direct/01/?href=http://get.live.com/messenger/overview

_______________________________________________
Wireshark-dev mailing list
Wireshark-dev@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-dev


  • References:
    • [Wireshark-dev] Byte order, hf_register_info and value displayed
      • From: Hal Lander
  • Prev by Date: [Wireshark-dev] Byte order, hf_register_info and value displayed
  • Next by Date: [Wireshark-dev] [PATCH] New plugin for Homeplug
  • Previous by thread: [Wireshark-dev] Byte order, hf_register_info and value displayed
  • Next by thread: [Wireshark-dev] [PATCH] New plugin for Homeplug
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation