Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: Re: [Wireshark-dev] proto_add_tree_item versus proto_add_tree_string

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 12 Mar 2007 17:39:43 -0700


On Mar 12, 2007, at 5:11 PM, Neely Grady-W30566 wrote:

The problem I run into is the bitmask will need to be shifted depending on where in the byte the interesting bits are. Is there a way to shift the bitmasks in the hf_ struct?

No.  The bitmask for any given hf_ structure is a constant.

However, there can be more than one hf_ structure for a given field name, with different bit masks.

BTW, how do you plan to handle a field that straddles a byte boundary? You can't do that with a 1-byte field, even if the field has fewer than 8 bits.

  • Follow-Ups:
    • Re: [Wireshark-dev] proto_add_tree_item versus proto_add_tree_string
      • From: Neely Grady-W30566
  • References:
    • [Wireshark-dev] proto_add_tree_item versus proto_add_tree_string
      • From: Neely Grady-W30566
    • Re: [Wireshark-dev] proto_add_tree_item versus proto_add_tree_string
      • From: Stephen Fisher
    • Re: [Wireshark-dev] proto_add_tree_item versus proto_add_tree_string
      • From: Neely Grady-W30566
  • Prev by Date: Re: [Wireshark-dev] proto_add_tree_item versus proto_add_tree_string
  • Next by Date: Re: [Wireshark-dev] proto_add_tree_item versus proto_add_tree_string
  • Previous by thread: Re: [Wireshark-dev] proto_add_tree_item versus proto_add_tree_string
  • Next by thread: Re: [Wireshark-dev] proto_add_tree_item versus proto_add_tree_string
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation