ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 9191] New: When packet field/byte selected in Packet Detai

Date: Thu, 26 Sep 2013 07:18:47 +0000
Bug ID 9191
Summary When packet field/byte selected in Packet Details or Packet Bytes, show field offsets in Status Bar
Classification Unclassified
Product Wireshark
Version 1.10.2
Hardware x86
OS Windows 7
Status UNCONFIRMED
Severity Enhancement
Priority Low
Component Wireshark
Assignee [email protected]
Reporter [email protected]

Build Information:

--
Hi,

I tried to use Wireshark to find out what the field offsets were in a set of
packets, so that I could then use that information to build packets manually in
another application.

While it is possible to work out the offset values for particular fields using
the offset column in the Packet Detail view, I think it would be useful if that
information was worked out and shown for the field in the status bar. I think
it would be useful to show the offset from both the start of the packet/frame
and also from the start of the PDU header the field is from.

For example, for an Ethernet/IPv4 packet, when the Differentiated Services
Field is selected in the Packet Details pane, the status bar information would
be something like:

Differentiated Services field (ip.dsfield), 1 bytes, Packet Offset: 15, Header
Offset: 1

as the DiffServ field is offset 15 octets from the start of the packet, and 1
octet offset from the start of the IPv4 header.

I think it would also be useful to be able to select an individual byte in the
Packet Details pane, and show the offset of that byte from the start of the
Packet and parent PDU header. As the selection of bytes in the Packet Details
currently selects ranges of bytes that correspond to the field in the packet,
perhaps the way to select an individual byte could be to use something like the
Alt+Left Mouse Button (avoiding the traditional Shift+Left Mouse Button or
Ctrl+Left Mouse Button).


Thanks.


You are receiving this mail because:
  • You are watching all bug changes.