Re: can't filter field in wireshark

[Jeff Morriss <jeff.morriss.ws () gmail com>]

On 08/18/2011 10:10 AM, Moussa.Alawieh () zodiacaerospace com wrote:
> thanks for your response....
>
> However, what you said is very importanty for me because I have put this
> function in many place of my code !!!!
>
> Is there any other function that can replace the "proto_tree_add_text()" ??

Yes: any of the proto_tree_add_*() functions.  The best/simplest is 
proto_tree_add_item(): it does all the work for you (well, once you've 
built your hf_ entries correctly).

> and do you think that it exist a way to satisfy my question in the
> precedent mail ???

Sure: build a time structure (combining the time from your packet with 
the frame arrival time) and add it using proto_tree_add_time().  (I'd 
suggest you look in the other dissectors for examples of how to use this 
function.)
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request () wireshark org?subject=unsubscribe