["Peyrusson, Yannick (Ext)" <yannick.peyrusson.external@xxxxxxxx>]

Hi,

 

What happens if I define filter expressions for 2 fields which intersect themselves ?
Let me give an example :

In my dissector I fill in the fields:
hf_myproto_field1 with the filter _expression_ "myproto.field1"
hf_myproto_field2 with the filter _expression_ "myproto.field2" 
The situation is :

+------------+
| opcode     |
+------------+
| field1 or  |
| field2     |
|            |
+------------+

 

then, 

when opcode equals 1, the second field is a 8 bits field named field1; and

when opcode equals 2, the second field is a 16 bits field named field2

 

Am I wrong ?

If not, what happens when filtering for example the field1 (that has no sens if opcode equals 2) ??

Is the user obliged to specify an opcode value in his filter too ??

 

Regards

 

----
yp