Richard Sharpe wrote:
>
> Hi,
>
> It seems that there are situations where we need access to the length of
> the actual frame/packet data available.
>
> This seems especially so if the user has not captured enough of the frame,
> we need to abort rather than try to keep decoding when there is no more
> data to decode.
>
Yes, this is available in dissect routines via the (frame_data) fd->caplen
variable.
--
Laurent DENIEL | E-mail: deniel@xxxxxxxxxxx
Paris, FRANCE | deniel@xxxxxxxxxxxxxxxxxxxxxxxxxxxx
| WWW : http://www.worldnet.fr/~deniel
All above opinions are personal, unless stated otherwise.
Powered by MHonArc 2.6.10