On Feb 17, 2014, at 2:48 PM, Jeff Morriss <[email protected]> wrote:
> Yes (so we can check if it's our packet without throwing an exception). Note that a lot of that can be done with tvb_memeql(), which returns "not equal" if the against which which we're comparing isn't present in the tvbuff. Not all, however, can; for example, "is the 2-byte big-endian field at an offset of 2 in the range from 17 to 137" can't. It can, however, be done with a combination of tvb_bytes_exist() (to check whether the field exists; if it doesn't, the heuristic check fails) followed by fetches and checks. ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <[email protected]> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe
