| 2018-06-14 15:08:23 +0000 | marked best answer | Access lower layer protocol information from dissector Hi, I'm sure it's a question that has been asked many times, but I could not find it... In the C dissector I'm writing on top of UDP (triggered by udp.port), I need to access the 'total length' field from the UDP header. I need this because captured packet length is not enough as there can be Ethernet padding. But when the dissector gets called, I can only access payload, not header from lower layer protocol. I guess I'll have to mess around with packet_info or proto_tree but I did not figure it out. Thanks in advance! |
| 2018-06-14 15:08:23 +0000 | received badge | ● Scholar (source) |
| 2018-06-14 15:08:20 +0000 | commented answer | Access lower layer protocol information from dissector I did, but it is not exactly crystal clear what "reported length" actually means...anyway like most of the time you find |
| 2018-06-14 15:04:12 +0000 | commented answer | Access lower layer protocol information from dissector ôk looking at the code it seems it is just the reported length of the tvbuff... |
| 2018-06-14 14:27:59 +0000 | commented answer | Access lower layer protocol information from dissector cool, so how do I get this? dissector prototype is (tvbuff_t, packet_info, proto_tree, void*). I guess I'll have to cast |
| 2018-06-14 14:27:37 +0000 | commented answer | Access lower layer protocol information from dissector cool, so how do I get this? dissector prototype is (tvbuff_t tvbuff, packet_info, proto_tree, void*). I guess I'll have |
| 2018-06-14 14:27:17 +0000 | commented answer | Access lower layer protocol information from dissector cool, so how do I get this? dissector prototype is (tvbuff_t tvbuff, packet_info, proto_tree, void). I guess I'll have t |
| 2018-06-14 13:37:54 +0000 | commented question | Access lower layer protocol information from dissector Well, actually I need to read the UDP header to be able to know what part is actually padding... |
| 2018-06-14 09:03:37 +0000 | edited question | Access lower layer protocol information from dissector Access lower layer protocol information from dissector Hi, I'm sure it's a question that has been asked many times, but |
| 2018-06-14 09:00:39 +0000 | received badge | ● Editor (source) |
| 2018-06-14 09:00:39 +0000 | edited question | Access lower layer protocol information from dissector Access lower layer protocol information from dissector Hi, I'm sure it's a question that has been asked many times, but |
| 2018-06-14 08:59:56 +0000 | asked a question | Access lower layer protocol information from dissector Access lower layer protocol information from dissector Hi, I'm sure it's a question that has been asked many times, but |