Hi, I'm not sure I follow your description, but these parts I can comment on.
proto_tree_add_item(tree,hf,offset,offset+1,FALSE); is wrong. The 'offset+1' part is a length indicator, not an end indicator as you use it. The correct expression should be proto_tree_add_item(tree,hf,offset,1,FALSE); The field type FT_STRING is for displaying text strings, not arbitrary data. You further say 'word' and '4 bits'. A 'word' is usually considered to be a 16 or 32 bit value, while '4 bits' is also called a nibble. To handle the nibbles you can either proto_tree_add_item() with a headerfield containing a bitmap, or use proto_tree_add_bits*(). Thanx, Jaap Vipper82 wrote: > Hi all, > i'm writing a dissector, i use proto_tree_add_item for marking 1 word > (hex) in frame stream.But proto_tree_add_item marks only in byte with > offset means in byte.(proto_add_item(tree,hf,offset,offset +1,FALSE); > by hf_register_info, i use FT_STRING and BASE_NONE to display this word > on wireshark. but it was not correct. > The question is: how can i mark or cut each word (4 bits) from data > stream and display it on wireshark? > Thanks for any answer > _______________________________________________ Wireshark-dev mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-dev
