Ask Your Question

Hi, my machine is little endian and in wireshark code everywhere I am using "ENC_BIG_ENDIAN". Will it affect the execution?

asked 2021-06-08 11:46:50 +0000

My machine is little endian and in wireshark code in some function I am passing "ENC_BIG_ENDIAN" value. Will it affect execution? Will it show appropriate packet information or I need to changes this to "ENC_LITTLE_ENDIAN"?

e.g. tvb_get_bits64(tvb,offset,num_bits, ENC_BIG_ENDIAN);

Please tell the solution for this.

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2021-06-08 13:52:10 +0000

grahamb gravatar image

The encoding is the ordering of the bytes as transmitted over the network, not the host machine running Wireshark. If the protocol uses big-endian ordering, then the dissector must do so as well.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2021-06-08 11:46:50 +0000

Seen: 175 times

Last updated: Jun 08 '21