Ethereal-dev: [Ethereal-dev] question about dissect protocol based on flow not the packet.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Huagang XIE <huagang@xxxxxxxxxxxxx>
Date: Wed, 22 Jan 2003 14:31:17 -0800
Hi,
This is in a tcp flow, Say, the 1st record(maybe in 1 packet or mutitple packet) is login request packet, and the 2nd record from client is command request, the 3rd one is something else and the 1st record from server is login banner, the 2nd is command response etc. Each record contain a length to inditicate how long the record is. The record type can be identified from the sequence of the record, but not from the packet individul.. I just wondering if ethereal dissector can handle this kind of thing and how.
I try to use a counter and reset it using conversation(), but it seems that the COL_INFO is woring well, but the TREE is not working, for it can not get the proper number value in the sequence. 

Regards,
huagang