Wireshark mailing list archives
Re: tvb_reported_length vs tvb_captured_length
From: Jaap Keuter <jaap.keuter () xs4all nl>
Date: Tue, 4 Jun 2019 22:22:38 +0200
Hi, When a dissector returns an integer value it returns the amount of packet data it has dissected to its calling dissector. Therefore, if a dissector intends to dissect all data it can return the length of the captured data it is handed. Therefore it uses tvb_captured_length.
On 4 Jun 2019, at 11:51, Bruno Verstuyft <bruno.verstuyft () excentis com> wrote: However, in the developer documentation "Adding a basic dissector" (https://www.wireshark.org/docs/wsdg_html_chunked/ChDissectAdd.html <https://www.wireshark.org/docs/wsdg_html_chunked/ChDissectAdd.html>), the dissect_foo function returns tvb_captured_length.
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- tvb_reported_length vs tvb_captured_length Bruno Verstuyft (Jun 04)
- Re: tvb_reported_length vs tvb_captured_length Jaap Keuter (Jun 04)