Hi,
The moment we enter dissect_xxx(tvb,pinfo,tree)
We put a check on the value of tree i.e.
If(tree)
{
/* code for actual dissection
}
What does this check signify ?? somewhere it is written that it defines whether
the user is looking for a detailed dissection or not ,could any body please
t
This check was necessary in older versions of Wireshark, but not with
recent versions. The only purpose it serves now is optimization, so
you can safely remove it.
On Sun, Feb 23, 2014 at 5:25 AM, Rahul Rohit wrote:
> Hi,
>
>
>
> The moment we enter dissect_xxx(tvb,pinfo,tree)
>
> We put a check
after get and dissect a packet,how to display this packet in the packet_view?by
call which function in which file?
peter___
Sent via:Wireshark-dev mailing list
Archives:http://www.wireshark.org/lists/wireshark-dev
On Sun, Feb 23, 2014 at 7:44 AM, 我想不无聊 <237825...@qq.com> wrote:
> after get and dissect a packet,how to display this packet in the
> packet_view?by call which function in which file?
While I admire your persistence in asking questions, all of this can
be understood by reading doc/README.dissecto
On Feb 23, 2014, at 7:44 AM, ?? <237825...@qq.com> wrote:
> after get and dissect a packet,how to display this packet in the
> packet_view?by call which function in which file?
You don't. If Wireshark needs to display a packet in the packet view, it'll
call the top-level frame dissec
thanks.you mean that the display operation is done in the dissector,right?when
i debug the wireshark source,i check the function callstack and i can not find
the display function,but i want to change the display infomation,what should i
do?and what infomation will be display in the packet view,i
On Sun, Feb 23, 2014 at 5:12 PM, 我想不无聊 <237825...@qq.com> wrote:
> thanks.you mean that the display operation is done in the
> dissector,right?
Yes. A dissector is called according to the protocols above it. It
then adds things to the proto tree and the columns as it needs to.
> when i debug the
On Feb 23, 2014, at 5:12 PM, "??" <237825...@qq.com> wrote:
> thanks.you mean that the display operation is done in the dissector,right?
Wrong.
It's done by code in the ui/gtk directory for the GTK+ version and in code in
the ui/qt directory for the Qt version.
What the dissector does
