The lower-level protocol is UDP. The protocol I'm dissecting is called PVM.
There are packets in PVM which are correlated but are still different
packets, not fragments.
So there are no flags saying the packet is actually a fragment.
Again, there is an operation in PVM called SPAWN. Spawn generates 4
different packets (called EXEC, EXECACK and so on). What I'd like to do is
to show JUST ONE PACKET, label it as SPAWN
bacause in my opinion the user doesn't care about details (exec, execack...)
but just wants to check
whether its spawn operation has succeded : )
Can I do it?
From: Guy Harris <gharris@xxxxxxxxx>
Reply-To: Ethereal development <ethereal-dev@xxxxxxxxxxxx>
To: Ethereal development <ethereal-dev@xxxxxxxxxxxx>
Subject: Re: [Ethereal-dev] Question
Date: Wed, 01 Feb 2006 03:41:14 -0800
fabio matturro wrote:
I'd like to collect all the packets containing data (protocol-defined
data) and show them in JUST one packet. Is it possible? These packets are
not necessarily fragments of a single data packet.
In general, is it possible to collect infos (data, most of all) from
different packets and show them in a single packet?
It's possible to have a dissector for a particular protocol reassemble data
from multiple packets for a lower-level protocol that make up a single
packet for the protocol being dissected, and dissect the reassembled packet
as part of the dissection of the last packet.
The dissector would have to include code to make it do so.
What are the protocols in question?
_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev
_________________________________________________________________
Blocca le pop-up pubblicitarie con MSN Toolbar! http://toolbar.msn.it/
