2015-10-06 8:07 GMT+02:00 Petr Gotthard <petr.gotth...@centrum.cz>: > Hello, > > Is there a way to distinguish multiple frames of the same protocol in one > TCP/IP packet? I have several small AMQP frames which all fit into a single > IP frame, so they share a single packet_info structure.When I call > p_add_proto_data() for the second AMQP frame, it (obviously) overwrites > data stored for the first frame, so I need to distibguish between them > somehow. > > Is there a counter that would tell me "this is a third AMQP frame in this > pinfo"? I found packet_info->curr_layer_num, but this is useful for nested > frames (like IP in IP). Is there something similar for groupped frames, > please? >
Hi Peter, I'm not sure we have such counter, but https://code.wireshark.org/review/#/c/10579/ suggested the use of tvb_raw_offset as key for p_(add|get)_proto_data() functions which seems a good tradeoff. Best regards, Pascal.
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe
