This is a static archive of our old Q&A Site. Please post any new questions and answers at

Dissector: ignore “0x00” in a string (FT_STRING)?



I am writing a custom Wireshark dissector which needs to show some strings. Let me say there is some hex code like "48 65 6c 6c 6f" which is "Hello". This is interpreted fine by using FT_STRING in the hf_ declaration. If this hex codes contain something like "48 65 6c 6c 6f 00 48 65 6c 6c 6f", the second "Hello" gets not displayed in the UI. I assume it is because of the "00" in between. Is there a way to convince Wireshark not to interpret "00" as a string termination but continue displaying the string?

Thanks, hhhannes

asked 01 Oct '13, 01:45

hhhannes's gravatar image

accept rate: 0%