Unable to display IP addresses correctly..!!

I have created a dissector for cluster heartbeat messages. Everything works okay except the IP addresses. An IP of 10.102.1.71 is displayed by the dissector as 71.1.102.10.

How correct this? Do i need to apply host to network transformation or the other way around??

And most importantly, how to apply that transformation??

Regards, Sidharth

wireshark

asked 13 Jul '11, 04:53

sid
46●19●20●21
accept rate: 0%

What is the exact code you're using to fetch the IP address and put it into the protocol tree?

You're not supposed to apply any byte-order transformation to IP addresses.

(13 Jul '11, 10:41) Guy Harris ♦♦

One Answer:

oldest newest most voted

0	Set the final parameter of `proto_tree_add_item()` for adding the IP addresses to `ENC_LITTLE_ENDIAN` (or `TRUE` if you're working with trunk-1.4 based code). link answered 13 Jul '11, 06:21 Jaap ♦ 6.0k●5●68 accept rate: 11% edited 14 Jul '11, 01:43

Your answer

toggle preview

community wiki

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "Title")
image?![alt text](/path/img.jpg "Title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Tags:

wireshark ×468

Asked: 13 Jul '11, 04:53

Seen: 588 times

Last updated: 14 Jul '11, 01:43

Unable to display IP addresses correctly..!!

Follow this question

You have a trillion packets.

You need to see four of them.

Don't have Wireshark?

Related questions