Hi, my machine is little endian and in wireshark code everywhere I am using "ENC_BIG_ENDIAN". Will it affect the execution?

asked 2021-06-08 11:46:50 +0000

My machine is little endian and in wireshark code in some function I am passing "ENC_BIG_ENDIAN" value. Will it affect execution? Will it show appropriate packet information or I need to changes this to "ENC_LITTLE_ENDIAN"?

e.g. tvb_get_bits64(tvb,offset,num_bits, ENC_BIG_ENDIAN);

Please tell the solution for this.

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2021-06-08 13:52:10 +0000

grahamb

flag of United Kingdom of Great Britain and Northern Ireland

23835 ●4 ●973 ●227 https://www.wireshark.org

The encoding is the ordering of the bytes as transmitted over the network, not the host machine running Wireshark. If the protocol uses big-endian ordering, then the dissector must do so as well.

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2021-06-08 11:46:50 +0000

Seen: 204 times

Last updated: Jun 08 '21

Hi, my machine is little endian and in wireshark code everywhere I am using "ENC_BIG_ENDIAN". Will it affect the execution? edit

1 Answer