This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How not to add a new tab to packet bytes pane with a new tvb?

0

Hi,

I'm writing a dissector for a protocol that has many values from disjoint bytes. For example, one 8-byte value can be stored in offset 0-4 and 16-20. I realized that using the byteArray:tvb() to create a new tvb and then apply the tvb:int64() is the best way to get the values. However, whenever I create a new tvb with the ByteArray:tvb() function, a new tab is added to the packet bytes pane in the wireshark GUI. And since I have lots of these tabs, I believe it is the reason why my wireshark is crashing now whenever I click on a tree item that refers to a newly created tvb. Is there a way to read the values out of the disjoint bytes without creating all the new tabs?

Thanks so much, YX

asked 27 Feb '14, 09:13

YXI's gravatar image

YXI
21182023
accept rate: 0%