Ethereal-dev: Re: [ethereal-dev] Plugin Questions

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Wed, 3 May 2000 10:45:53 -0700
> After playing around with the gryphon-example I have some questions:
> 1. In COTP there is no additional separator like the port-number in 
>    TCP. Can a plugin create a filter at registration to look into the
>    first few bytes of the remaining data of the frame?

Currently, no.

I have some stuff on which I've been working, to allow what I've been
calling "heuristic" dissectors to be added; "heuristic" dissectors are
in lists, rather than hash tables, and the list is handled by calling
each of the dissectors in it until one of them returns TRUE - this is
for dissectors that have to look at the payload in order to decide
whether a frame contains a packet for its protocol, which currently
includes:

	your H1 dissector;

	the ONC RPC dissector;

	the GIOP and Yahoo Messenger dissectors.

I'll look into checking that in.