Wireshark-dev: Re: [Wireshark-dev] Dynamic allocation of the array fields
From: Anders Broman <[email protected]>
Date: Wed, 21 May 2014 14:37:40 +0000

 

 

From: [email protected] [mailto:[email protected]] On Behalf Of Raul Felice
Sent: den 20 maj 2014 17:48
To: [email protected]
Subject: [Wireshark-dev] Dynamic allocation of the array fields

> 

>Since I do not know how to then provide you the question, I preferred link you directly post in which I describe my problem; I hope this does not disturb you.
>
>http://ask.wireshark.org/questions/32811/how-to-reference-field-for-display-filters
>
>
>I apologize for my English not very fair and I thank you in advance.

 

>In each package of my protocol may appear a NOT predetermined number of fields, with different names (read from an external file)

 

I’m not sure I understand what that means…

I don’t think you can escape from having one hf per field in any case.

 

How are the length of the “field” in the packet determined and what type of data do you have in your file helping you to identify the fields? Is there nothing in the packet

Identifying which fields or set of fields that are present?

Regards

Anders