Wireshark  4.3.0
The Wireshark network protocol analyzer
Public Attributes | List of all members
tvbuff Struct Reference

Public Attributes

const struct tvb_opsops
gboolean initialized
guint flags
struct tvbuffds_tvb
const guint8 * real_data
guint length
guint reported_length
guint contained_length
gint raw_offset

Member Data Documentation

◆ contained_length

guint tvbuff::contained_length

If this was extracted from a parent tvbuff, this is the amount of extracted data that was reported as being in the parent tvbuff; if this represents a blob of data in that tvbuff that has a length specified by data in that tvbuff, it might be greater than the amount of data that was actually there to extract, so it could be greater than reported_length.

If this wasn't extracted from a parent tvbuff, this is the same as reported_length.

This must never be > reported_length.

◆ ds_tvb

struct tvbuff* tvbuff::ds_tvb

data source top-level tvbuff

◆ length

guint tvbuff::length

Amount of data that's available from the capture file. This is the length of virtual buffer (and/or real_data). It may be less than the reported length if this is from a packet that was cut short by the capture process.

This must never be > reported_length or contained_length.

◆ real_data

const guint8* tvbuff::real_data

Pointer to the data for this tvbuff. It might be null, which either means that 1) it's a zero-length tvbuff or 2) the tvbuff was lazily constructed, so that we don't allocate a buffer of backing data and fill it in unless we need that data, e.g. when tvb_get_ptr() is called.

◆ reported_length

guint tvbuff::reported_length

Amount of data that was reported as being in the packet or other data that this represents. As indicated above, it may be greater than the amount of data that's available.

The documentation for this struct was generated from the following file: