Ethereal-dev: Re: [Ethereal-dev] Returning strings for later use in other places in the DCE

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Tim Potter <tpot@xxxxxxxxx>
Date: Sat, 16 Mar 2002 08:22:06 +1100
On Sat, Mar 16, 2002 at 07:15:24AM +1030, Richard Sharpe wrote:

> In looking at prettying up some aspects of the DCERPC dissector I would 
> like to be able to take some parts if the objects dissected and place them 
> in the INFO field.
> 
> However, since each dissector returns how many bytes it consumed, this is 
> not currently possible.

Yes that would be very handy.  Only the spoolss dissector (which doesn't
use the dissect_ndr functions yet) can pass data upstream for inclusion
in the info field.

I haven't thought of a good solution other than returning a GList of
items parsed.

> I guess that we could return this info in another param passed to each of 
> these functions, but it sure would be nice if we had a protocol tree as an 
> attribute-value tree that we could search for info :-)

Like a GHashTable or something?


Tim.