Wireshark-dev: Re: [Wireshark-dev] Proper use of proto_tree_add_string?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "kannoll" <maillistnoll@xxxxxxxxxxxxx>
Date: Fri, 29 Jun 2007 14:36:23 -0400
You're correct, except I have a flag in a previous portion of the packet
that's telling me there's supposed to be more data.

I want to print something that points back to that flag to say "Bogus flag!"

--kan-- 

-----Original Message-----
From: wireshark-dev-bounces@xxxxxxxxxxxxx
[mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Guy Harris
Sent: Friday, June 29, 2007 2:07 PM
To: Developer support list for Wireshark
Subject: Re: [Wireshark-dev] Proper use of proto_tree_add_string?

kannoll wrote:
> That's a good idea, and I'll probably have a place to use it, but my 
> immediate problem is packets that end before expected,

...which means that you'd be trying to fetch data past the end of the
packet, right?  If so, an exception would be thrown (as you're going past
the end of the tvbuff), and the packet will be marked as malformed for you -
you don't even have to write any code to do that.
_______________________________________________
Wireshark-dev mailing list
Wireshark-dev@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-dev