Wireshark-dev: Re: [Wireshark-dev] query regarding field registration of unicode string
From: ajay seshadri <[email protected]>
Date: Mon, 26 Jul 2010 11:18:57 -0700 (PDT)

Can you please tell me the arguments of the g_free() function, to be used along with tvb_fake_unicode()? I couldn't find it in the developer document. Also, is it supposed to be called at the end of the dissector?


From: Jaap Keuter <[email protected]>
To: Developer support list for Wireshark <[email protected]>
Sent: Tue, July 13, 2010 4:51:20 PM
Subject: Re: [Wireshark-dev] query regarding field registration of unicode string


There's no direct support for Unicode strings in Wireshark.

What's been done, by the SMB dissector for instance, is that the Unicode string is extracted from the TVB and then converted to an ASCII string before being added to the protocol tree using proto_tree_add_string().

The TVB module provides you with some helper functions: tvb_*fake_unicode().


On Tue, 13 Jul 2010 00:10:45 -0700 (PDT), ajay seshadri <[email protected]> wrote:


I was going through the Wireshark Developer's guide to understand the implementation of a dissector.

I had a doubt regarding the field registration of unicode string. Is there any specific value for unicode string, or FT_NONE is to be used while setting up a list of header fields using the array - hf[ ]?

Thanks and Best Regards,
Ajay Seshadri