Wireshark mailing list archives
protocol dissector: little endian ethernet address
From: Mike Ryan <mikeryan () isecpartners com>
Date: Tue, 5 Feb 2013 14:07:02 -0800
I am working on a protocol dissector for Bluetooth Low Energy. The link
layer header includes ethernet addresses, but they are little-endian. Is
it possible to have Wireshark display them properly?
Here is what I have so far:
http://sourceforge.net/p/libbtbb/code/ci/18965c19d5a3c1b495c40fb13fed71197918e643/tree/wireshark/plugins/btle/packet-btle.c#l114
The code reads:
const guint8 *adv_addr, *init_addr;
adv_addr = tvb_get_ptr(tvb, offset, 6);
SET_ADDRESS(&pinfo->src, AT_ETHER, 6, adv_addr);
init_addr = tvb_get_ptr(tvb, offset+6, 6);
SET_ADDRESS(&pinfo->dst, AT_ETHER, 6, init_addr);
proto_tree_add_ether(tree, hf_btle_adv_addr, tvb, offset, 6, adv_addr);
proto_tree_add_ether(tree, hf_btle_init_addr, tvb, offset + 6, 6, init_addr);
[Please reply-all, as I am not on-list]
Attachment:
signature.asc
Description: Digital signature
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- protocol dissector: little endian ethernet address Mike Ryan (Feb 06)
