[Anne Yu <anne@xxxxxxxxxxxx>]

I was using wireshark to test our wsp protocol, and get confused about 
how the value-length
supposed to be used. For example, for a message defined as "value-length 
field1 field2", it
should be the value length of field1 or the length of field1 + field2?

I cannot find out what version of the specification that wireshark use 
for wsp. I am testing
the wsp base on WAP-230-WSP-20010702-a version 5 July 21. In section 
8.4.2.2 Length,
it saying "value length is used to indicate the length of the value to 
follow". So for an example
a message like "value-length field1 field2", What should be the 
value-length?

I try to decode two messages using wireshark, one is based on section 
8.4.2.51 Warning field,
wireshark seems using the first way, which is value length of the field 
right next to it.
Warning-value = Value-length Warn-code Warn-agent Warn-text
when I set the Value-length to the length of 
Warn-code+Warn-agent+Warn-text, wireshark
give error; if I set the Value-length to length of Warn-code, it seems 
decode ok.

Another one I tried is based on section 8.4.2.53 Content-disposition 
field, which defined as
Content-disposition-value = Value-length Disposition *(Parameter), base 
on the Warning field
in section 8.4.2.51, I set the Value-length to the length of 
Disposition, it decode with error. But
if I set the Value-length to the length of Disposition+Parameter, it 
could decode it.

So I am getting confused about which way wireshark used for 
value-length. Any idea, comment?
Thanks!

-Anne     anne@xxxxxxxxxxxx




*********************************************************************************************************
"This e-mail (and any attachments) is confidential and privileged information of Catapult Communications"
*********************************************************************************************************