Hi Jaap,
Thanks for your advice. but all I want is to get rid of red [Malformed Packet : myprotocolname] label, when my packet is undersize or oversize. Do you have any suggestions?
Yours, truly
On Wed, Dec 10, 2008 at 7:47 PM, Jaap Keuter
<jaap.keuter@xxxxxxxxx> wrote:
Hi,
Just make sure you don't read more bytes from the tvb than that are in
their. You should have some measure from the protocol fields
themselves, or use tvb_length_remaining()
Thanx,
Jaap
Sent from my iPhone
On 10 dec 2008, at 10:04,
spiritsince1969@xxxxxxxxx wrote:
> Hi everyone,
> I wrote a dissector for a special protocol, which may has only
> 40~44 bytes packets. Although i can dissect it as well, i'll receive
> a red [Malformed Packet : myprotocolname] label at the end of the
> packet details window . How to remove this this restrict and make
> wireshark allows packet which length is from 40 to 2000 bytes?
> Sorry for my poor english.
>
>
>
> Sincerely yours,
> SpiritSince1969
> Sent via: Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
> mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
--
Sincerely yours,
SpiritSince1969