ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] can't filter field in wireshark

From: Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>
Date: Thu, 18 Aug 2011 11:07:09 -0400
On 08/18/2011 10:10 AM, Moussa.Alawieh@xxxxxxxxxxxxxxxxxxx wrote:
thanks for your response....

However, what you said is very importanty for me because I have put this
function in many place of my code !!!!

Is there any other function that can replace the "proto_tree_add_text()" ??

Yes: any of the proto_tree_add_*() functions. The best/simplest is proto_tree_add_item(): it does all the work for you (well, once you've built your hf_ entries correctly).

and do you think that it exist a way to satisfy my question in the
precedent mail ???

Sure: build a time structure (combining the time from your packet with the frame arrival time) and add it using proto_tree_add_time(). (I'd suggest you look in the other dissectors for examples of how to use this function.)