Best practice for dissecting modular protocol

[Jan Gerbecks <jan.gerbecks () stud uni-due de>]

Hallo,

I am currently writing a wireshark pnrp dissector and ran into a little problem. It is my first time writing a 
wireshark dissector and I am wondering what the best practice approach for the following problem is:

The pnrp protocol is based on modular concept, where you have the following basic structure as defined in
 http://msdn.microsoft.com/en-us/library/cc239047(PROT.13).aspx

-------------------------------------------------------------------------------------------------------------------------------------------------------------
| FieldID 8bit  | Length 16 bit | Data as specified in FieldId and described by length  | FieldID | Length | Data|---   
        |
-------------------------------------------------------------------------------------------------------------------------------------------------------------

One example is that the FieldID specifies that an array of PNRP IDs is following, length specifies the length of this 
segment and in the Data Part will be any number of 1 - n pnrp ids.

To dissect this correctly, I could obviously try to define the maximum number of PNRP Ids in the hf_register_info hf[] 
Array but that doesn't seem like a very elegant solution. 
I had a look at the vnc dissector but it didn't quite solved the same problem.

Any help is greatly appreciated and I hope somebody can point me in the right direction.

Thanks in advance,
Jan

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe