On May 5, 2011, at 8:59 AM, Fernandez, Rafael wrote:
> guint get_message_tcpmessage_len(packet_info *pinfo, tvbuff_t *tvb, int
> offset)
> {
> guint remaining = tvb_length_remaining(tvb, offset);
> guint last_size = tvb_get_letohl(tvb, offset)+MESSAGE_HEADER_SIZE;
So, in your protocol:
all messages start with a fixed-length header MESSAGE_HEADER_SIZE bytes
long, and may have zero or more bytes after that header;
the first 4 bytes of a message (i.e., the first 4 bytes of the header)
are a little-endian value that is the length of the part of the message after
the fixed-length header?
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe
