On Apr 24, 2009, at 8:31 AM, Armin Zimmermann wrote:
> The reason I want to know this is that tvb_reported_length() gives
> me the length of the data without the TCP-Header but in case of an
> UDP package it gives me the length of the data included the UDP
> Header.
Not if you have a heuristics UDP dissector, it doesn't. Heuristic UDP
dissectors - i.e., dissectors registered with
heur_dissector_add("udp", dissect_XXX, proto_XXX) - get passed a
tvbuff containing the UDP *payload*, not including the header, so
tvb_reported_length() will not include the size of the UDP header.
The same is true for heuristic TCP dissectors - you get a tvbuff
containing the TCP segment's contents, not including the TCP header.
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <[email protected]>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:[email protected]?subject=unsubscribe
