Wireshark · Ethereal-dev: [Ethereal-dev] [patch] eDonkey and BitTorrent dissectors

[John Sullivan <john@xxxxxxxxxxxxxxxxxxxx>]

Three patches here:

eth-ed-2.diff
-------------

1) The handling of HashSet Answer messages was wrong
2) Add dissection of some more eMule extension packets to do with
   error recovery

   
eth-bt-1.diff
-------------

New versions of the Azureus BitTorrent client implement a new
extension to the protocol, which is effectively a text based
encapsulation of the binary BitTorrent protocol, embedded within the
BitTorrent protocol. Who knows why they thought that was a good idea,
but this patch can pick apart their new headers.


eth-bt-2.diff
-------------

This is more of a suggestion/request than a polished patch. The
current BT dissector installs a heuristic dissector. If this fails to
match, for example because your capture file doesn't contain the start
of the TCP conversation, it is impossible to force ethereal to dissect
as BT regardless.

By registering a normal dissector as well as the heuristic one,
BitTorrent shows up on the Decode As... list so you can manually
override its mistake.

This patch keeps the heuristic registration - I'm not sure what
effects having both registered at the same time may have, but it
didn't seem to cause me any problems. I've also put in, but left
#ifdef'd out, the default set of TCP ports that BT tends to run over.
   
John
-- 
Dead stars still burn

Attachment: eth-bt-1.diff
Description: Binary data

Attachment: eth-ed-2.diff
Description: Binary data

Attachment: eth-bt-2.diff
Description: Binary data