Ethereal-dev: Re: [ethereal-dev] filters for ethereal?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Joao Carlos Mendes Luis <jonny@xxxxxxxxxxxx>
Date: Thu, 10 Dec 1998 20:28:04 -0200 (EDT)
#define quoting(Laurent Deniel)
// Yes, I also think that this is a good idea. I already have some code
// that parses and converts some user protocols defined in a text file 
// into pseudo filters and automatic decoding routines. But that code contains
// some proprietary parts and is not really 64 bits clean. 
// This is why I had not included it in ethereal.
// 
// But this is a good idea to allow non C programmers to decode
// higher-level or proprietary protocols (so not commonly used) without modifying
// ethereal code.

Instead of interpreting a text definition, wouldn't it be better to
have decoders as dinamic loading pre-compiled modules ?  I can not
imagine a newbie creting a decoder module, anyway.  And having
some example sources would help.  Maybe every decoder could be a
dynamic loaded module for more generalization.

Also, instead of having a decoder map, I would prefer a hierarchical
decoding API, with a top level "ethernet" (or whatever fisical layer)
decoder, which calls other modules, recursively.  This would deal
easily with encapsulated protocols, for example.

Since I've already started dreaming, what about packet linking, to
fully decode segmented packets ?  :)  No, I don't have the faintest
idea on how to do that, neither on the interface, nor on the
implementation side.  But it could be useful in some cases.

					Jonny

--
Joao Carlos Mendes Luis            M.Sc. Student
jonny@xxxxxxxxxxxx                 Universidade Federal do Rio de Janeiro
"This .sig is not meant to be politically correct."