GetPreviousProtocolOffsetByName function

The GetPreviousProtocolOffsetByName function returns the previous instance of a given protocol.

Syntax

DWORD WINAPI GetPreviousProtocolOffsetByName(
  _In_  HFRAME hFrame,
  _In_  DWORD  dwStartOffset,
  _In_  LPSTR  szProtocolName,
  _Out_ DWORD  *pdwPreviousOffset
);

Parameters

hFrame [in]

Handle to the frame.

dwStartOffset [in]

Offset in the frame.

szProtocolName [in]

Name of the protocol you want to search for.

pdwPreviousOffset [out]

Pointer to a DWORD that contains the offset to the previous protocol (if the function succeeds).

Return value

If the function is successful, the return value is NMERR_SUCCESS.

If the function is unsuccessful, the return value is NMERR_PROTOCOL_NOT_FOUND.

Remarks

Experts and parsers can call the GetPreviousProtocolOffsetByName.

Requirements