Wireshark-dev: Re: [Wireshark-dev] Index of multiple protocol frames in one packet?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Anders Broman <a.broman58@xxxxxxxxx>
Date: Tue, 6 Oct 2015 08:19:22 +0200


Den 6 okt 2015 08:07 skrev "Petr Gotthard" <petr.gotthard@xxxxxxxxxx>:
>
> Hello,
>
> Is there a way to distinguish multiple frames of the same protocol in one TCP/IP packet? I have several small AMQP frames which all fit into a single IP frame, so they share a single packet_info structure.When I call p_add_proto_data() for the second AMQP frame, it (obviously) overwrites data stored for the first frame, so I need to distibguish between them somehow.
>
> Is there a counter that would tell me "this is a third AMQP frame in this pinfo"? I found packet_info->curr_layer_num, but this is useful for nested frames (like IP in IP). Is there something similar for groupped frames, please?

Curr_layer_number is supposed to be used as the key in p_add_proto_data()

Regards
Andets

>
>
> Thanks,
> Petr
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives:    https://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>              mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe