Thanks for the explanation.

 1.  << The result of a packet dissection is thrown away as soon as the packet 
has been read and presented, so if you 'click' on a new packet the dissection 
has to be redone.>>

"Thrown away" means it's not stored anywhere. Am I right? If yes, why is it 
thrown away? And also, few things are done only once using "flags.visited == 
FALSE", why then this variable is used, if the previous results are not stored, 
then everything has to be redone.


 1.  << Not sure what you are referring to here >>
In packet-rlc.c in epan/dissectors, duplicity of RLC frames is checked, should 
that be done everytime?

________________________________
From: wireshark-dev-boun...@wireshark.org 
[mailto:wireshark-dev-boun...@wireshark.org] On Behalf Of Anders Broman
Sent: Friday, January 10, 2014 2:53 PM
To: Developer support list for Wireshark
Subject: Re: [Wireshark-dev] Siginificance of pinfo->fd->flags.visited



From: wireshark-dev-boun...@wireshark.org 
[mailto:wireshark-dev-boun...@wireshark.org] On Behalf Of Vishnu Bhatt
Sent: den 10 januari 2014 08:59
To: wireshark-dev@wireshark.org
Subject: [Wireshark-dev] Siginificance of pinfo->fd->flags.visited

>Hello all,
>
>Can anyone please explain me the significance of pinfo->fd->flags.visited. I 
>know that this variable is set to TRUE if a packet has been visited once but 
>if we click on the same packet then why all things are done again?

pinfo->fd->flags.visited is FALSE on the first pass when all packets are read 
in sequence then it's set to FALSE. The result of a packet dissection is thrown 
away as soon as the packet has been read and presented, so if you 'click' on a 
new packet the dissection has to be redone.

>
>Logically if a frame has been dissected once, it should not be checked again, 
>so condition "if(pinfo->fd->flags.visited == FALSE)" should always be checked 
>before doing the dissection.
No true see above.

>Why the need of re-dissecting >the frame over and over again?

See above.

>My second doubt is that in RLC, if duplicity has already been checked then why 
>to check it again? I mean should the duplicity function be covered under 
>"if(pinfo->fd->flags.visited == FALSE)"?


Not sure what you are referring to here...

Thanks
Vishnu Bhatt




===============================================================================
Please refer to http://www.aricent.com/legal/email_disclaimer.html
for important disclosures regarding this electronic communication.
===============================================================================




===============================================================================
Please refer to http://www.aricent.com/legal/email_disclaimer.html
for important disclosures regarding this electronic communication.
===============================================================================
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

Reply via email to