ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] Filter expressions for recursive structures

From: Roland Knall <rknall@xxxxxxxxx>
Date: Sat, 30 Jul 2022 09:12:31 +0200
Just to pile on, a very similar issue exists with OPC UA, more because the dissector is generated and the generator is not respecting naming schemes but they face the same issue. 

Kind regards
Roland

> Am 29.07.2022 um 18:28 schrieb Richard Sharpe <realrichardsharpe@xxxxxxxxx>:
> 
> Hi folks,
> 
> The wonderful people working on 802.11 have started using recursive structures.
> 
> That is, they are embedding Info Elements (IEs) within Info Elements
> and there can be multiple IEs of the same type within an IE within a
> Beacon or Probe etc frame.
> 
> Now some people are asking to be able to refer to a specific embedded
> IE within an IE.
> 
> That would seem to present problems because there is no way to
> concatenate filter expressions.
> 
> About the best I can think of is pass some context to IE dissectors
> via the pinfo field and to insert that into field values via a
> proto_item_append_text ...
> 
> Are there any other thoughts about how to deal with this issue?
> 
> -- 
> Regards,
> Richard Sharpe
> (何以解憂?唯有杜康。--曹操)(传说杜康是酒的发明者)
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives:    https://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
>             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe