I was using wireshark to test our wsp protocol, and get confused about how the value-length supposed to be used. For example, for a message defined as "value-length field1 field2", it should be the value length of field1 or the length of field1 + field2?
I cannot find out what version of the specification that wireshark use for wsp. I am testing the wsp base on WAP-230-WSP-20010702-a version 5 July 21. In section 8.4.2.2 Length, it saying "value length is used to indicate the length of the value to follow". So for an example a message like "value-length field1 field2", What should be the value-length? I try to decode two messages using wireshark, one is based on section 8.4.2.51 Warning field, wireshark seems using the first way, which is value length of the field right next to it. Warning-value = Value-length Warn-code Warn-agent Warn-text when I set the Value-length to the length of Warn-code+Warn-agent+Warn-text, wireshark give error; if I set the Value-length to length of Warn-code, it seems decode ok. Another one I tried is based on section 8.4.2.53 Content-disposition field, which defined as Content-disposition-value = Value-length Disposition *(Parameter), base on the Warning field in section 8.4.2.51, I set the Value-length to the length of Disposition, it decode with error. But if I set the Value-length to the length of Disposition+Parameter, it could decode it. So I am getting confused about which way wireshark used for value-length. Any idea, comment? Thanks! -Anne [EMAIL PROTECTED] ********************************************************************************************************* "This e-mail (and any attachments) is confidential and privileged information of Catapult Communications" ********************************************************************************************************* _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
