Wireshark-bugs: [Wireshark-bugs] [Bug 4345] Add new NetflowV9 template fields for Network Based
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 22 Dec 2009 14:14:02 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4345

--- Comment #4 from Kirby Files <ksfiles@xxxxxxxxx> 2009-12-22 14:14:02 PST ---
(In reply to comment #3)
> I'd prefer if you used a proto_tree_add_item() for NBAR applicationId too.

Could you please help me the idiom for doing so? I was using
proto_tree_add_item() with the following registration:

  {&hf_cflow_nbar_appl_id,
   {"ApplicationId", "cflow.appl_id",
    FT_UINT16, BASE_DEC, NULL, 0x0,
    "Application ID (NBAR)", HFILL}
  },

and the call:

proto_tree_add_item(pdutree, hf_cflow_nbar_appl_id,
  tvb, offset, length, FALSE);

However, since the Netflow template itself claims the field as 4 bytes,
wireshark seemed to ignore my definition of the field as a 2-byte unsigned. The
only workaround I could find is to format the text myself with
proto_tree_add_text().

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.