Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Dynamic allocation of the array fields

From: Anders Broman <anders.broman@xxxxxxxxxxxx>
Date: Wed, 21 May 2014 14:37:40 +0000

 

 

From: wireshark-dev-bounces@xxxxxxxxxxxxx [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Raul Felice
Sent: den 20 maj 2014 17:48
To: wireshark-dev@xxxxxxxxxxxxx
Subject: [Wireshark-dev] Dynamic allocation of the array fields

> 

>Since I do not know how to then provide you the question, I preferred link you directly post in which I describe my problem; I hope this does not disturb you.
>
>http://ask.wireshark.org/questions/32811/how-to-reference-field-for-display-filters
>
>
>I apologize for my English not very fair and I thank you in advance.

 

>In each package of my protocol may appear a NOT predetermined number of fields, with different names (read from an external file)

 

I’m not sure I understand what that means…

I don’t think you can escape from having one hf per field in any case.

 

How are the length of the “field” in the packet determined and what type of data do you have in your file helping you to identify the fields? Is there nothing in the packet

Identifying which fields or set of fields that are present?

Regards

Anders