Hello,
for a proprietary protocol based on the OSI-stack I would like to
write a plugin. I am forced to do so, because we got information about
the protocol under NDA.
After playing around with the gryphon-example I have some questions:
1. In COTP there is no additional separator like the port-number in
TCP. Can a plugin create a filter at registration to look into the
first few bytes of the remaining data of the frame?
2. In the current ABI for plugins the dissector doesn't return a value.
I think it could be useful to return a boolean with information
about sucessful decoding. It would enable the installation of
multiple plugins basing ontop of COTP and is a possible solution
to my first question. What do you think?
3. It seems, that I cannot apply a display filter for a plugin.
A display filter "XYZ" for a plugin registred as protocol "XYZ"
didn't work for me. Bug in my code or plugin design issue?
Gerrit
Btw: Gerald, thanks for the CVS-tarballs.
--
Dr.-Ing. Gerrit Gehnen Abt. LT
ATR Industrie-Elektronik Textilstraße 2, 41751 Viersen, Germany
Tel. (+49)2162 485-362 Fax (+49)2162 485-100
http://www.atrie.de