Re: [Wireshark-dev] tvb_captured_length or tvb_reported_length?

Guy Harris writes: > On Sep 3, 2015, at 1:09 AM, Robert Cragie wrote: > > > Thanks for all your responses - much clearer now. I have used what I think is right for what I am doing and all > seems OK. On a quick review of all the code, all I would say is that some of

Re: [Wireshark-dev] tvb_captured_length or tvb_reported_length?

Thanks for all your responses - much clearer now. I have used what I think is right for what I am doing and all seems OK. On a quick review of all the code, all I would say is that some of the uses are probably inconsistent with what has been said. Robert On 2 September 2015 at 19:05, Guy Harris

Re: [Wireshark-dev] tvb_captured_length or tvb_reported_length?

May be use this description for update doc ? (README.dissector...) On Thu, Sep 3, 2015 at 10:41 AM, Guy Harris wrote: > > On Sep 3, 2015, at 1:09 AM, Robert Cragie > wrote: > > > Thanks for all your responses - much clearer now. I have used what

Re: [Wireshark-dev] tvb_captured_length or tvb_reported_length?

Many systems support packet capture such that only the first n bytes of each captured packet is saved, as this is far more efficient and frequently enough if you're only interested in the headers. When that occurs, "captured" is the number of bytes actually captured, while "reported" is the

[Wireshark-dev] tvb_captured_length or tvb_reported_length?

I am trying to understand the changes to the previous use of tvb_length(). There are now two functions (and their associates): * tvb_captured_length() * tvb_reported_length() As far as I can tell, tvb_captured_length() is the direct replacement for tvb_length() but tvbuff.h says "You probably

Re: [Wireshark-dev] tvb_captured_length or tvb_reported_length?

2015-09-02 19:37 GMT+02:00 Evan Huus : > Many systems support packet capture such that only the first n bytes > of each captured packet is saved, as this is far more efficient and > frequently enough if you're only interested in the headers. When that > occurs, "captured" is

Re: [Wireshark-dev] tvb_captured_length or tvb_reported_length?

Hi Robert, 2015-09-02 19:33 GMT+02:00 Robert Cragie : > > I am trying to understand the changes to the previous use of tvb_length(). > There are now two functions (and their associates): > > * tvb_captured_length() > * tvb_reported_length() > > As far as I can tell,

Re: [Wireshark-dev] tvb_captured_length or tvb_reported_length?

On Sep 2, 2015, at 10:33 AM, Robert Cragie wrote: > I am trying to understand the changes to the previous use of tvb_length(). > There are now two functions There have *always* been two functions; that was not changed. They were originally: tvb_length()