GetPreviousProtocolOffsetByName

The GetPreviousProtocolOffsetByName function returns the previous instance of a given protocol.

DWORD WINAPIGetPreviousProtocolOffsetByName(HFRAMEhFrame,
DWORDdwStartOffset,
LPSTRszProtocolName,
DWORD*pdwPreviousOffset);

Parameters

• hFrame
  [in] Handle to the frame.
• dwStartOffset
  [in] Offset in the frame.
• szProtocolName
  [in] Name of the protocol you want to search for.
• pdwPreviousOffset
  [out] Pointer to a DWORD that contains the offset to the previous protocol (if the function succeeds).

Return Values

If the function is successful, the return value is NMERR_SUCCESS.

If the function is unsuccessful, the return value is NMERR_PROTOCOL_NOT_FOUND.

Remarks

Experts and parsers can call the GetPreviousProtocolOffsetByName.

Requirements