I am working on a protocol dissector for Bluetooth Low Energy. The link layer header includes ethernet addresses, but they are little-endian. Is it possible to have Wireshark display them properly?
Here is what I have so far:
http://sourceforge.net/p/libbtbb/code/ci/18965c19d5a3c1b495c40fb13fed71197918e643/tree/wireshark/plugins/btle/packet-btle.c#l114
The code reads:
const guint8 *adv_addr, *init_addr;
adv_addr = tvb_get_ptr(tvb, offset, 6);
SET_ADDRESS(&pinfo->src, AT_ETHER, 6, adv_addr);
init_addr = tvb_get_ptr(tvb, offset+6, 6);
SET_ADDRESS(&pinfo->dst, AT_ETHER, 6, init_addr);
proto_tree_add_ether(tree, hf_btle_adv_addr, tvb, offset, 6, adv_addr);
proto_tree_add_ether(tree, hf_btle_init_addr, tvb, offset + 6, 6,
init_addr);
[Please reply-all, as I am not on-list]
signature.asc
Description: Digital signature
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe
