Ethereal-dev: Re: [Ethereal-dev] match_port and match_string in packet_info

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Richard Sharpe <rsharpe@xxxxxxxxxxxxxxxxx>
Date: Tue, 28 Dec 2004 19:33:38 -0800 (PST)
On Tue, 28 Dec 2004, Nina Pham wrote:

> how do I use match_port and match_string in packet_info structure? Is
> match_port ID_VALUE specified in dissector_add function?

I am not sure about the match string, but the match port was the port that
matched for this packet. Thus if you asked for "tcp.port" of 771, you
should see 771 in match_port. It allows you to determine, among other
things, which direction you are seeing (ie, request or response) for those
protocols using fixed ports on the server.

Regards
-----
Richard Sharpe, rsharpe[at]richardsharpe.com, rsharpe[at]samba.org,
sharpe[at]ethereal.com, http://www.richardsharpe.com