First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Hi, my machine is little endian and in wireshark code everywhere I am using "ENC_BIG_ENDIAN". Will it affect the execution?

My machine is little endian and in wireshark code in some function I am passing "ENC_BIG_ENDIAN" value. Will it affect execution? Will it show appropriate packet information or I need to changes this to "ENC_LITTLE_ENDIAN"?

e.g. tvb_get_bits64(tvb,offset,num_bits, ENC_BIG_ENDIAN);

Please tell the solution for this.

Rasika Gondkar's avatar
1
Rasika Gondkar
asked 2021-06-08 11:46:50 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

The encoding is the ordering of the bytes as transmitted over the network, not the host machine running Wireshark. If the protocol uses big-endian ordering, then the dissector must do so as well.

grahamb's avatar
23.8k
grahamb
answered 2021-06-08 13:52:10 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer