Hi Amit,
If I am not mistaken, the tvb is first created in the dissect_packet
function of epan/packet.c.
Hope this helps.
Abhik.
On Mon, Jun 9, 2008 at 10:12 AM, Amit Paliwal
<Amit.Paliwal@xxxxxxxxxxxxxxx> wrote:
>
> thanks for your reply.
>
> but can you plz let me know where is it done in source code, if you can tell
> me where in code is it done i will be in a better position to understand
> that.
>
>
>
> "Gilbert Ramirez" <gram@xxxxxxxxxxxxxxx>
> Sent by: wireshark-dev-bounces@xxxxxxxxxxxxx
>
> 06/09/2008 10:58 AM
>
> Please respond to
> Developer support list for Wireshark <wireshark-dev@xxxxxxxxxxxxx>
> To
> "Developer support list for Wireshark" <wireshark-dev@xxxxxxxxxxxxx>
> cc
> Subject
> Re: [Wireshark-dev] tvb buffer
>
>
>
>
> The pcap library collects the data from the operating system. That
> gets passed to wireshark and the tvb is created.
>
> --gilbert
>
> On 6/9/08, Amit Paliwal <Amit.Paliwal@xxxxxxxxxxxxxxx> wrote:
>>
>> I know that in wireshark when a farme is selected the top level dissector
>> is
>> called like ethernet which in turn calls other dissectors. But I really
>> want
>> to know where is this buffer tvb constructed for the first time which is
>> than passed to subsequent dissectors. Is it constructed from the raw data
>> received on the network card.
>>
>> ______________________________________________________________________
>>
>> _______________________________________________
>> Wireshark-dev mailing list
>> Wireshark-dev@xxxxxxxxxxxxx
>> https://wireshark.org/mailman/listinfo/wireshark-dev
>>
>>
> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> https://wireshark.org/mailman/listinfo/wireshark-dev
>
> ______________________________________________________________________
>
>
> ______________________________________________________________________
>
> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> https://wireshark.org/mailman/listinfo/wireshark-dev
>
>
