Wireshark mailing list archives

Packet field as multiple lines


From: Jay Turner <jayrturner99 () gmail com>
Date: Wed, 1 Oct 2014 11:23:09 -0500

I have a multi-byte field that I translate to ASCII and display as multiple
lines in the dissection.

When there is one line it is associated with an hf_register_info and I can
filter on the abbreviation.

When there are multiple lines the same proto_tree_add_string_format used
multiple times on the same hf_register_info created the display, but
searching failed. Only <field-abbr>=="" succeeded. So I dynamically created
an array of hf_register_info structs with unique field Ida but with the
same abbreviation. These also displayed well, but couldn't be searched.

How do I create lines of fields for data that I can use in a filter?


-- 
Jay Turner
Contact: 214-587-7364
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: