Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: [Wireshark-dev] Bits Dissect Issue

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Sean <yunjnz@xxxxxxxxx>
Date: Thu, 4 Dec 2008 12:34:49 -0800 (PST)

Hi,

I want to dissect a packet, each field of this packet is not byte aligned, 
and the bits mask position of each field is not fixed. The position is determined by some bits in the content.
For example, the following packet:
F1 has one bit, F2 has 3 bits, F3 has 10 bits, F4 has 1 bit, F5 has 1 bit
After F1-F2-F3-F4-F5, the next sequence is still F1-F2-F3-F4-F5 if the current F4 is 1,
and there will be a sequence of E1-E2-E3 if F5 is 1, E1 has 1 bit, E2 has 2 bits, E3 has 5 bits.

+  +  +  +  +  +  +  +
F1 F2    F3
F3(Cont.)      F4 F5 F1
F2       F3

How to decode such a packet with wireshark?
Your help will be highly appreciated!

Regards,
Sean


      

  • Follow-Ups:
    • Re: [Wireshark-dev] Bits Dissect Issue
      • From: Jaap Keuter
  • Prev by Date: [Wireshark-dev] [Fwd: Re: [Wireshark-commits] rev 26904: /trunk/plugins/unistim/ /trunk/plugins/unistim/: packet-unistim.c]
  • Next by Date: [Wireshark-dev] buildbot failure in Wireshark (release) on Windows-XP-x86
  • Previous by thread: Re: [Wireshark-dev] [Fwd: Re: [Wireshark-commits] rev 26904: /trunk/plugins/unistim/ /trunk/plugins/unistim/: packet-unistim.c]
  • Next by thread: Re: [Wireshark-dev] Bits Dissect Issue
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation