Wireshark · Ethereal-dev: [Ethereal-dev] Re: increasing number of bytes printed from "proto_tree_add_bytes" function

["Jasim Tariq" <jasimtariqjt@xxxxxxxxxxx>]

> If you have set the offset and length correct in your dissector, why not 
> have a look at which >bytes are highlighted in the packet bytes pane?
>
>
> True this exactly how I called this function. Im sorry, what I actually 
> ment was that even if I use >some other function such as 
> proto_item_add_text etc., then, in the packet detail pane, only the >first 
> few bytes of the buffer are printed ending with three "..." meaning that 
> there is still more in >this buffer. I think everything's ok. The way Im 
> calling my function as you pointed out is ok too. >Except there are some 
> functions in ethereal that I have to change in order to be able to print 
> the >entire buffer instead of the beginning part of it being printed on the 
> packet details pane. So I >think I have to change some ethereal functions ( 
> maybe GUI ) in order to be able to print the >entire buffer or array on the 
> packet details pane and then compile ethereal again to achieve this. >But I 
> dont know what those functions are. Can you tell me what those functions 
> are?
>
> Thanks Jasim

To elaborate further on my point I think a picture should help in this case. 
Attached is a picture that shows the circled part that that means that there 
is more data. "Tvbuff Bytes" is the actual bytres of the packet displayed in 
the Packet Bytes pane. The entire Tvbuff is highlighted in Packet Bytes pane 
but the Packet Details pane only prints the first few bytes of the Tvbuff. I 
want to display the complete Tvbuff. How can I do that? Any suggestions?

Thanks
Jasim

Attachment: print.bmp
Description: Windows bitmap