Hi, I'm writing a dissector for a protocol that has many values from disjoint bytes. For example, one 8-byte value can be stored in offset 0-4 and 16-20. I realized that using the byteArray:tvb() to create a new tvb and then apply the tvb:int64() is the best way to get the values. However, whenever I create a new tvb with the ByteArray:tvb() function, a new tab is added to the packet bytes pane in the wireshark GUI. And since I have lots of these tabs, I believe it is the reason why my wireshark is crashing now whenever I click on a tree item that refers to a newly created tvb. Is there a way to read the values out of the disjoint bytes without creating all the new tabs? Thanks so much, YX asked 27 Feb '14, 09:13 YXI |