ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] Bits Dissect Issue

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Thu, 04 Dec 2008 22:30:22 +0100
Hi,

Would proto_tree_add_bits_item() do the trick?

Thanx,
Jaap

Sean wrote:
Hi,

I want to dissect a packet, each field of this packet is not byte aligned, and the bits mask position of each field is not fixed. The position is determined by some bits in the content.
For example, the following packet:
F1 has one bit, F2 has 3 bits, F3 has 10 bits, F4 has 1 bit, F5 has 1 bit
After F1-F2-F3-F4-F5, the next sequence is still F1-F2-F3-F4-F5 if the current F4 is 1,
and there will be a sequence of E1-E2-E3 if F5 is 1, E1 has 1 bit, E2 has 2 bits, E3 has 5 bits.

+  +  +  +  +  +  +  +
F1 F2    F3
F3(Cont.)      F4 F5 F1
F2       F3

How to decode such a packet with wireshark?
Your help will be highly appreciated!

Regards,
Sean


_______________________________________________
Wireshark-dev mailing list
Wireshark-dev@xxxxxxxxxxxxx
https://wireshark.org/mailman/listinfo/wireshark-dev