Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: [Wireshark-dev] col_set_str not working from plugin ?? bug 1967

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Gilles Dufour (gdufour)" <gdufour@xxxxxxxxx>
Date: Mon, 7 Jul 2008 12:25:14 +0200

Hi,
 
I used to do this a few years ago, but I might be a bit rusty :)
 
I have a plugin/dll dissector that I created and it works fine except I never get the column text to be modified.
Whatever the column.
I tried many different commands (you will see it in the code below).
Even tried to create my own col_set_str - called mcol_set_str
 
I'm just clueless and would appreciate some help.
 
The protocol runs on top of UDP.  Again everything else works so I know the dissector is correctly called.
 
 
gboolean dissect_ace_hb (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)
{
    proto_item *ti;
    proto_tree *ace_tree;
    int offset;
 
 // col_set_writable(pinfo->cinfo, TRUE);
 if (check_col(pinfo->cinfo, COL_PROTOCOL)){
  col_clear(pinfo->cinfo, COL_PROTOCOL);
  col_set_str(pinfo->cinfo, COL_PROTOCOL, "ACE-HB");
  //mcol_set_str(pinfo->cinfo, COL_PROTOCOL, "ACE-HB");
  //col_add_fstr(pinfo->cinfo, COL_INFO,"%s","ACE-HB");
 }
 
 /* Clear out the Info column. */
 if (check_col(pinfo->cinfo, COL_INFO))
  col_clear(pinfo->cinfo, COL_INFO);
I found a bug that is an exact match of my problem
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1967
 
 
Thanks,
 
Gilles.
  • Follow-Ups:
    • Re: [Wireshark-dev] col_set_str not working from plugin ?? bug 1967
      • From: Jeff Morriss
  • Prev by Date: [Wireshark-dev] viewing previously dissected information?
  • Next by Date: [Wireshark-dev] Wireshark-1.0.1 "questionable" display filter fields.
  • Previous by thread: [Wireshark-dev] viewing previously dissected information?
  • Next by thread: Re: [Wireshark-dev] col_set_str not working from plugin ?? bug 1967
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation