You're correct, except I have a flag in a previous portion of the packet that's telling me there's supposed to be more data.
I want to print something that points back to that flag to say "Bogus flag!" --kan-- -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Guy Harris Sent: Friday, June 29, 2007 2:07 PM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] Proper use of proto_tree_add_string? kannoll wrote: > That's a good idea, and I'll probably have a place to use it, but my > immediate problem is packets that end before expected, ...which means that you'd be trying to fetch data past the end of the packet, right? If so, an exception would be thrown (as you're going past the end of the tvbuff), and the packet will be marked as malformed for you - you don't even have to write any code to do that. _______________________________________________ Wireshark-dev mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-dev _______________________________________________ Wireshark-dev mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-dev
