Wireshark-users: Re: [Wireshark-users] RE : Truncated field in XML detailed export result

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Thu, 09 Nov 2006 11:56:11 +0100
Olivier LENORMAND wrote:
If it's a "feature", I guess we'll have to do with it by never trusting
the "show" field and always decoding the "value" field.
You can trust the show field that it will contain what you will see on the screen. This is something completely different (tm) from the value field.
But I do agree with you, it's at least disturbing :)
My two cents: let's not export the "show" field in the XML file, imho no
information is better than unannonced truncaded one.
Anyone has a better idea about this problem?
Just because you can't use it in the way you use it, doesn't mean that it's useless for others.

Regards, ULFL