Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: [Wireshark-dev] viewing previously dissected information?

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "David McPike" <david@xxxxxxxxxxxxxxxxxxxxx>
Date: Sun, 6 Jul 2008 02:14:58 -0400

Hello all,

I am working on a dissector that views UDP conversations between two
802.11 clients.  Since I may capture a frame either from client 1 to
the AP, from AP to client, or both, I would like to be able to view
the 802.11 flags field from each frame to help me.  I'm having trouble
figuring out how to do this.  Would there need to be a
p_add_proto_data added to dissect_ieee80211_common with this field
that I could retrieve with a p_get_proto_data later or is this
dissected information still sitting around somewhere that I can access
from a later dissector?

Thanks!

  • Prev by Date: Re: [Wireshark-dev] Making a draft plugin available
  • Next by Date: [Wireshark-dev] col_set_str not working from plugin ?? bug 1967
  • Previous by thread: Re: [Wireshark-dev] Making a draft plugin available
  • Next by thread: [Wireshark-dev] col_set_str not working from plugin ?? bug 1967
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation