ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] Standard defined field names in Wireshark dissectors

From: Alexis La Goutte <alexis.lagoutte@xxxxxxxxx>
Date: Sun, 5 Jan 2020 21:06:05 +0100
Hi,

We have already make some big change for Wireless (remove mgmt on display filter) and no really a big issue...

About standard for display filter and display filler name, it is complicated... for USB specification, the standard descriptors is not really "name" (bXXXId...)

Cheers

On Sun, Jan 5, 2020 at 7:45 PM Dario Lombardo <lomato@xxxxxxxxx> wrote:
I agree that scripts should not rely on such an output. However sometimes there isn't another option or people just do it anyway. We must consider that as well.
Talking about Tomasz proposal, I agree that we should follow the standards as closely as possible. But if that breaks backward compatibility, I'd suggest to keep it for wirershark 4.0.
Major version changes break backward compatibility, and that looks to be the case.

On Sun, Jan 5, 2020 at 7:17 PM Guy Harris <guy@xxxxxxxxxxxx> wrote:
On Jan 5, 2020, at 8:06 AM, Tomasz Moń <desowin@xxxxxxxxx> wrote:

> In case of the USB Audio descriptor dissection, I would like to change
> the header_field_info name, leaving abbrev as is. Would that still
> cause problems?

It would cause problems for programs that parse TShark -T text (default text) output (or "export the packet dissections as plain text" Wireshark output), but programs should avoid doing that if possible - they should use other -T formats, in which the abbrev is used.

It shouldn't cause problem for any other software; filters, for example, use the abbrev.  ("abbrev" should be thought of as the field name, and "name" should be thought of as the field *description*.)

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe


--
Naima is online.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe