I am writing a custom protocol wireshark dissector in C as a plugin. I have got the dissector working . I am not able to figure out if there is a way to access the information we fill in section header / interface description header from our dissector? There seem to be tvbuff and packet_info passed , which don't have this information. Is there a way to access these fields? asked 14 Dec '16, 10:17  rashmi_s |
One Answer:
There's no supported mechanism to get at options in a Section Header Block or an Interface Description Block. answered 14 Dec '16, 14:13  Guy Harris ♦♦ |
Exactly what information are you looking for? Have you examined the pinfo structure passed into your dissector?
Hello,
I want to access the options fields (comment , os , hw etc) and other options fields I filled in section header and interface description block. I did have a look into pinfo , it seems to contain the metadata from enhanced packet block. Please correct me if I am wrong , is there any field in pinfo which will give access to section header and interface description options?
Is there any documentation explaining the pinfo structure in detail? I am not able to find section header or interface description options in pinfo.