Not completely sure I understand your question #1, but here's what I usually do:
a) starting with the original tvbuff_t* "tvb", I process my protocol's portion of the packet b) say my protocol uses N bytes, leaving R = (tvb_length(tvb) - N) bytes for the next dissector c) I create a new tvbuff_t*: sub_tvb = tvb_new_subset( tvb, N, R, R) d) I pass sub_tvb to the next dissector On question #2, I think any valid tvbuff_t* can be used for those calls.
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <[email protected]> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe
