The function ProtoField.absolute_time is documented (11.10.6.14), but may be broken in some way. At least, when I try to call it, I get an error dialogue containing the message "attempt to call field '?' (a nil value)", and pointing to the line with the absolute_time call, when starting wireshark. I am using version 1.6.7. Is this deliberate, or a bug? asked 02 May '12, 04:11  Brian Raven |
One Answer:
That function was added after 1.6 (that is, in the current trunk which is 1.7). The documentation you're looking at is probably the online WSUG which is, as per the front page, for 1.7 (not 1.6). You might want to use the WSUG that came with your version of Wireshark (if it did, in fact, come with one). answered 02 May '12, 09:14  JeffMorriss ♦ |
That explains it. I missed the "For Wireshark 1.7". I look forward to being able to add timestamps to my dissector, when 1.7 becomes stable.
Many thanks for the prompt response.
As this is a Q&A site, please don't forget to Accept the answer if it answered your question--see the FAQ.
Anyway, you're welcome!