Description:
If the value of the field specified is less than the "Threshold" parameter, it is returned as the size of the next protocol layer. Otherwise, the size of the next protocol layer is the rest of the payload, minus the value of the "Offset" parameter.
Parameters:
|
[Required] |
Field |
"Field that contains the next protocol size" |
|
|
[Required] |
Int |
"Threshold for length" |
|
|
[Required] |
Int |
"Offset" |
|
Example:
NEXT_PROTOCOL_SIZE (FromFieldIfLessThan type_length 0x5dd 4)