Wireshark · Wireshark-dev: Re: [Wireshark-dev] query regarding field registration of unicode string

[ajay seshadri <sesh_ajay@xxxxxxxxx>]

Hi,

Can you please tell me the arguments of the g_free() function, to be used along with tvb_fake_unicode()? I couldn't find it in the developer document. Also, is it supposed to be called at the end of the dissector?

Thanks,

Ajay

---

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
To: Developer support list for Wireshark <wireshark-dev@xxxxxxxxxxxxx>
Sent: Tue, July 13, 2010 4:51:20 PM
Subject: Re: [Wireshark-dev] query regarding field registration of unicode string

Hi,

There's no direct support for Unicode strings in Wireshark.

What's been done, by the SMB dissector for instance, is that the Unicode string is extracted from the TVB and then converted to an ASCII string before being added to the protocol tree using proto_tree_add_string().

The TVB module provides you with some helper functions: tvb_*fake_unicode().

Thanks,
Jaap

On Tue, 13 Jul 2010 00:10:45 -0700 (PDT), ajay seshadri <sesh_ajay@xxxxxxxxx> wrote:

Hello,

I was going through the Wireshark Developer's guide to understand the implementation of a dissector.

I had a doubt regarding the field registration of unicode string. Is there any specific value for unicode string, or FT_NONE is to be used while setting up a list of header fields using the array - hf[ ]?

Thanks and Best Regards,
Ajay Seshadri