Wireshark mailing list archives
Re: displaying header field without filtering
From: "John Dill" <John.Dill () greenfieldeng com>
Date: Fri, 21 Feb 2014 16:36:30 -0500
Message: 1 Date: Fri, 21 Feb 2014 17:22:59 +0100 From: Alexis La Goutte <alexis.lagoutte () gmail com> To: Developer support list for Wireshark <wireshark-dev () wireshark org> Subject: Re: [Wireshark-dev] displaying header field without filtering Message-ID: <CAHzrgZ=FGN0-ZcKRS5_rNm_d17DLaj5_tSkDtoRkiRCmMZ7OOw () mail gmail com> Content-Type: text/plain; charset="iso-8859-1" Hi, Why don't use FT_BYTES type ?
The FT_ type used to render the Spare bytes is not the root cause of my issue. There are probably several methods to render Spare bytes in the Packet Details pane using FT_BYTES or FT_UINT*. The key point is that populating a Spare data element in hf_register_info using a header_field_info struct forces (to the best of my knowledge) that field to appear in the Filter Expression dialog. For my set of requirements, they want to see the Spare bytes in the Packet Details pane for validation, but do not want to see them in the Filter Expression dialog, as they are not data of interest to engineers and there are a ton of unused or Spare data elements. I can use proto_tree_add_text to do what I need manually, but it's not as centralized and it seems in general not recommended for new plugin development. Best regards, John Dill [snip]
<<winmail.dat>>
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Re: displaying header field without filtering, (continued)
- Re: displaying header field without filtering Guy Harris (Feb 19)
- duplicate field names (was: displaying header field without filtering) Hadriel Kaplan (Feb 20)
- Re: duplicate field names (was: displaying header field without filtering) Pascal Quantin (Feb 20)
- Re: duplicate field names (was: displaying header field without filtering) Hadriel Kaplan (Feb 20)
- Re: displaying header field without filtering John Dill (Feb 20)
- Re: displaying header field without filtering Guy Harris (Feb 20)
- Re: displaying header field without filtering John Dill (Feb 21)
- Re: displaying header field without filtering Alexis La Goutte (Feb 21)
- Re: displaying header field without filtering Guy Harris (Feb 21)
- Re: displaying header field without filtering Jeff Morriss (Feb 24)
- Re: displaying header field without filtering John Dill (Feb 21)
- Re: displaying header field without filtering John Dill (Feb 24)