Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Wireshark Qt : Decode As

From: Alexis La Goutte <alexis.lagoutte@xxxxxxxxx>
Date: Wed, 6 Aug 2014 22:53:08 +0200
On Wed, Aug 6, 2014 at 1:03 AM, Joerg Mayer <jmayer@xxxxxxxxx> wrote:
> If someone starts to work on the Decode As stuff for qtshark:
> Can you please give me the same command line options as with tshark?
> The need to in some cases click half a dozen decode as dialogs and
> repeat that on the next capture again has annoyed me quite a few
> times with gtkshark.
It is different between Wireshark (GTK) and Tshark ?
>
> Thanks
>    Jörg
>
> On Mon, Aug 04, 2014 at 03:33:29PM -0700, Guy Harris wrote:
>>
>> On Aug 4, 2014, at 1:13 PM, Alexis La Goutte <alexis.lagoutte@xxxxxxxxx> wrote:
>>
>> > The decode As feature work for you with Wireshark Qt (qtshark)
>> >
>> > I have try on Windows, Linux, Mac OS X and don't work for me... (the
>> > value is never save...)
>>
>> Isn't saved, as in "isn't written to the decode_as_entries file", or is saved but doesn't work?
>>
>> > if i try with GTK and reopen with Qt works...
>>
>> For uint dissector tables, GTK+ was writing out the value in decimal, regardless of the base of the value for the table; Qt was writing it out in hex if the base for the value was hex.
>>
>> The code to *read* the tables assumed decimal, and read a hex value as 0, because it was using atoi().  I fixed it to use strtol() with a base argument of 0 (so that a number beginning with 0x or 0X is treated as hex), and to check that that the string was a valid number and the value was in the range 0 -> UINT_MAX and report lines where it isn't.
>>
>> This fixes it to the extent that the saved values work; I backported that fix to the 1.12 branch.
>>
>> However, if I change it in Qt, the change doesn't take effect until I quit and restart Wireshark, so there's another bug hiding there.
>> ___________________________________________________________________________
>> Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
>> Archives:    http://www.wireshark.org/lists/wireshark-dev
>> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>>              mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
>
> --
> Joerg Mayer                                           <jmayer@xxxxxxxxx>
> We are stuck with technology when what we really want is just stuff that
> works. Some say that should read Microsoft instead of technology.
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>              mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe