Hi, Would proto_tree_add_bits_item() do the trick?
Thanx, Jaap Sean wrote: > Hi, > > I want to dissect a packet, each field of this packet is not byte aligned, > and the bits mask position of each field is not fixed. The position is > determined by some bits in the content. > For example, the following packet: > F1 has one bit, F2 has 3 bits, F3 has 10 bits, F4 has 1 bit, F5 has 1 bit > After F1-F2-F3-F4-F5, the next sequence is still F1-F2-F3-F4-F5 if the > current F4 is 1, > and there will be a sequence of E1-E2-E3 if F5 is 1, E1 has 1 bit, E2 has 2 > bits, E3 has 5 bits. > > + + + + + + + + > F1 F2 F3 > F3(Cont.) F4 F5 F1 > F2 F3 > > How to decode such a packet with wireshark? > Your help will be highly appreciated! > > Regards, > Sean > > > > _______________________________________________ > Wireshark-dev mailing list > Wireshark-dev@wireshark.org > https://wireshark.org/mailman/listinfo/wireshark-dev _______________________________________________ Wireshark-dev mailing list Wireshark-dev@wireshark.org https://wireshark.org/mailman/listinfo/wireshark-dev
