Wireshark-dev: Re: [Wireshark-dev] Standard defined field names in Wireshark dissectors

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sun, 5 Jan 2020 10:16:21 -0800
On Jan 5, 2020, at 8:06 AM, Tomasz Moń <desowin@xxxxxxxxx> wrote:

> In case of the USB Audio descriptor dissection, I would like to change
> the header_field_info name, leaving abbrev as is. Would that still
> cause problems?

It would cause problems for programs that parse TShark -T text (default text) output (or "export the packet dissections as plain text" Wireshark output), but programs should avoid doing that if possible - they should use other -T formats, in which the abbrev is used.

It shouldn't cause problem for any other software; filters, for example, use the abbrev.  ("abbrev" should be thought of as the field name, and "name" should be thought of as the field *description*.)