This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Accessing header fields

0

Is there a way to change the header field names in the "hf_ register_info" while dissecting??

asked 05 Feb '13, 16:38

StealthUE's gravatar image

StealthUE
667713
accept rate: 100%


One Answer:

2

No, nor should there be; a field should stand for one and only one particular thing.

If you want to add new fields while dissecting (which has the disadvantage that a filter used before the new fields have been added, such as a read filter, won't necessarily work), you could call proto_register_field_array() in a dissector.

answered 05 Feb '13, 19:41

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%