Wireshark-dev: Re: [Wireshark-dev] Bits Dissect Issue

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Thu, 04 Dec 2008 22:30:22 +0100

Hi,

Would proto_tree_add_bits_item() do the trick?

Thanx,
Jaap

Sean wrote:

Hi,

I want to dissect a packet, each field of this packet is not byte aligned, and the bits mask position of each field is not fixed. The position is determined by some bits in the content.

For example, the following packet:
F1 has one bit, F2 has 3 bits, F3 has 10 bits, F4 has 1 bit, F5 has 1 bit
After F1-F2-F3-F4-F5, the next sequence is still F1-F2-F3-F4-F5 if the current F4 is 1,
and there will be a sequence of E1-E2-E3 if F5 is 1, E1 has 1 bit, E2 has 2 bits, E3 has 5 bits.

+  +  +  +  +  +  +  +
F1 F2    F3
F3(Cont.)      F4 F5 F1
F2       F3

How to decode such a packet with wireshark?
Your help will be highly appreciated!

Regards,
Sean

_______________________________________________

Wireshark-dev mailing list
Wireshark-dev@xxxxxxxxxxxxx
https://wireshark.org/mailman/listinfo/wireshark-dev