Wireshark-dev: Re: [Wireshark-dev] False positive from the new "Look for incomplete dissectors"

From: Anders Broman <a.broman58@xxxxxxxxx>
Date: Fri, 13 Feb 2015 10:14:39 +0100


Den 13 feb 2015 09:45 skrev "Dario Lombardo" <dario.lombardo.ml@xxxxxxxxx>:
>
>
>
> On Thu, Feb 12, 2015 at 6:18 PM, Anders Broman <a.broman58@xxxxxxxxx> wrote:
>>
>> I suspected as much, but I think all the sip lines skip the CRLF... 
>>
>>
> What about adding the skipped bytes as hidden, labeled as "unused bytes"? 
>
>
First thought is, unnecessary processing to satisfy this new functionality, which frankly I have my doubts about...
___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>              mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe