Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: Re: [Ethereal-dev] How to get a list of all vars avail from dissector.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Mon, 23 Dec 2002 00:10:59 -0800
On Sat, Dec 21, 2002 at 12:52:57AM -0800, Jaime Fournier wrote:
> I looked over the packet_info stucture for pinfo, and
> was wondering if there was a complete list of things
> like src addr, dst, etc, that I could review for their
> possible inclusion within what ever I spit out to
> STDERR, or file.

By "things" do you mean protocol filterable fields (in which case see
Ronnie Sahlberg's reply) or do you mean "values stored directly in the
packet_info structure"?  If the latter, then there is a complete list -
which is a list of the fields in a "packet_info" structure, so you've
already found the list.  (For example, the link-layer source and
destination addresses are in "dl_src" and "dl_dst", the network-layer
source and destination addresses are in "net_src" and "net_dst", and
"src" and "dst" contain the network-layer addresses if there are any,
otherwise the link-layer addresses.)