This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.
void tvb_set_subset  
(   tvbuff_t *  tvb,    
    tvbuff_t *  backing,  
    const gint  backing_offset,  
    const gint  backing_length,  
    const gint  reported_length  
)

What is backing_length, reported_length here ?

Please help.

asked 28 Feb '13, 23:28

yogeshg's gravatar image

yogeshg
41222326
accept rate: 0%

edited 01 Mar '13, 02:54

Jaap's gravatar image

Jaap ♦
11.7k16101


This function makes tvb a subset of backing. It creates a window upon the backing tvb as it were. The boundaries of that window are given by backing_offset and backing_length. The reported_length is the length as optionally reported by a lower layer protocol. It may be that during capture only the first part of a frame is captured, whereby the data in a protocol header can indicate what the true length of the frame, or packet on that protocol layer would have been. Then, if you dissect your protocol, you can discern why you run out of data, either because it is not in the frame (which is a protocol violation), or it may have been there, but was not captured (which is not a protocol violation, just a limitation of the capture).

permanent link

answered 01 Mar '13, 03:05

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×637
×13

question asked: 28 Feb '13, 23:28

question was seen: 1,183 times

last updated: 01 Mar '13, 03:05

p​o​w​e​r​e​d by O​S​Q​A