Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] questions about conversations

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Tue, 22 May 2007 13:37:41 -0700
On Thu, May 17, 2007 at 11:08:57AM +0200, Tomasz Noi?ski wrote:
> On Wed, 16 May 2007 15:48:36 -0700
> Guy Harris <guy@xxxxxxxxxxxx> wrote:
> 
> > Perhaps we need to have the key for the protocol data routines be a 
> > frame number and an offset within the frame, so that there can be 
> > multiple protocol data items within a link-layer frame.
> 
> I think "offset within a frame" might be not enough: For example, in 
> my case, I decode the packets first, creating a nev tvb with 
> tvb_new_real_data(). So, unless there's some tvb-magic I don't know 
> about, simple offset just isn't enough.
> 
> Numbering packets manually inside a frame (for example, as an 
> alternative to providing an offset, as Steve suggested) might be the 
> best solution...

Would you mind sharing the code you have so far so we can study it and 
see if the offset would work or not?


Steve