Hallo,
I am currently writing a wireshark pnrp dissector and ran into a little
problem. It is my first time writing a wireshark dissector and I am wondering
what the best practice approach for the following problem is:
The pnrp protocol is based on modular concept, where you have the following
basic structure as defined in
http://msdn.microsoft.com/en-us/library/cc239047(PROT.13).aspx
-------------------------------------------------------------------------------------------------------------------------------------------------------------
| FieldID 8bit | Length 16 bit | Data as specified in FieldId and described by
length | FieldID | Length | Data|--- |
-------------------------------------------------------------------------------------------------------------------------------------------------------------
One example is that the FieldID specifies that an array of PNRP IDs is
following, length specifies the length of this segment and in the Data Part
will be any number of 1 - n pnrp ids.
To dissect this correctly, I could obviously try to define the maximum number
of PNRP Ids in the hf_register_info hf[] Array but that doesn't seem like a
very elegant solution.
I had a look at the vnc dissector but it didn't quite solved the same problem.
Any help is greatly appreciated and I hope somebody can point me in the right
direction.
Thanks in advance,
Jan
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <[email protected]>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:[email protected]?subject=unsubscribe
