ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] Filter for generated items

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sun, 14 Nov 2010 14:33:04 -0800
On Nov 14, 2010, at 4:31 AM, Helge Kruse wrote:

> Hi I write a dissector DLL, that adds a generated item to the tree. 
> After defining the hf_info with type FT_STRING, i use 
> proto_item_append_text to show the generated string. But this item 
> cannot be used neither to search or to filter for this item.
> 
> I have seen, that the packet-frame.c uses proto_item_append_string to 
> show the protocol layers. This is also usable in a filter. Since 
> proto_item_append_string is not exported, the function is not available 
> for my dissector DLL.
> 
> How can I either add a hack to my DLL to simulate 
> proto_item_append_string or provide another way to filter and find?

You don't:

	http://www.wireshark.org/lists/wireshark-dev/201011/msg00156.html

That fix is scheduled for inclusion in the 1.4.2 and 1.2.13 releases.