Wireshark mailing list archives

Re: Changing value of packet during dissection


From: Guy Harris <guy () alum mit edu>
Date: Sun, 19 Nov 2017 11:27:55 -0800

On Nov 19, 2017, at 7:49 AM, Manik Khandelwal <manik123khandelwal () gmail com> wrote:

I am new to wireshark, I have a genuine question that it possible to change the value of a packet during dissection 
process. 

If you mean "change the *contents* of the packet", the answer is "no".  That's why all the packet pointers you get from 
tvbuff calls are const pointers.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: