ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] Filtering

Date: Tue, 31 Mar 2009 18:56:08 +0000
hello,

Sorry to bother again, but i did have another question. If i use proto_tree_add_text( ); for all my other branches, but still want to be able to filter them, is there a way i can make a variable like hf_icom_message, and set it to a value in dissect_icom() to be able to filter it? For example, make:

{ &hf_icom_message,
	{"Message", "icom.message",
	FT_UINT16, BASE_DEC,
	NULL, 0x0,
	NULL, HFILL }
}

and have somewhere hf_icom_message = 6; in dissect_icom()

and not use it for outputting anything, but just so i would be able to filter in wireshark with something like icom.message==6?

Thanks,

Greg