Ethereal-dev: [Ethereal-dev] Question regarding further 'analysis' of protocols

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Yaniv Kaul <ykaul@xxxxxxxxxxxxxx>
Date: Sun, 19 Jan 2003 12:11:32 +0200
I have a methodological question, about further processing protocols (similiar to the issue with 'missing' fields in DNS parser) I've asked last week.
I'll take for example, the FTP over IPv6 parser.
In EPSV command, it shows something like:
...<lower layers dissection>
File Transfer Protcol (FTP)
   Request Command: EPSV
   Request Arg: 2


While it's accurate, it is not complete, imho. What is request arg value 2? The answer is that it's the Address Family (AF) number, where 2 means 'Internet Protocol, Version 6'
(RFC 2428, section 2).
My question is, should we futher 'parse' this value (2, in this case), with the above description? In packet-isakmp.c, for example, almost any value is parsed. For example, instead of showing "Next payload: 3", it shows: "Next payload: Transform (3)".

Opinions are welcome,

Y.