If you have set the offset and length correct in your dissector, why not
have a look at which >bytes are highlighted in the packet bytes pane?
True this exactly how I called this function. Im sorry, what I actually
ment was that even if I use >some other function such as
proto_item_add_text etc., then, in the packet detail pane, only the >first
few bytes of the buffer are printed ending with three "..." meaning that
there is still more in >this buffer. I think everything's ok. The way Im
calling my function as you pointed out is ok too. >Except there are some
functions in ethereal that I have to change in order to be able to print
the >entire buffer instead of the beginning part of it being printed on the
packet details pane. So I >think I have to change some ethereal functions (
maybe GUI ) in order to be able to print the >entire buffer or array on the
packet details pane and then compile ethereal again to achieve this. >But I
dont know what those functions are. Can you tell me what those functions
are?
Thanks Jasim
To elaborate further on my point I think a picture should help in this case.
Attached is a picture that shows the circled part that that means that there
is more data. "Tvbuff Bytes" is the actual bytres of the packet displayed in
the Packet Bytes pane. The entire Tvbuff is highlighted in Packet Bytes pane
but the Packet Details pane only prints the first few bytes of the Tvbuff. I
want to display the complete Tvbuff. How can I do that? Any suggestions?
Thanks
Jasim
Attachment:
print.bmp
Description: Windows bitmap
