Ethereal-dev: Re: [Ethereal-dev] Re: Access to generalized dissecting

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Tue, 28 Mar 2006 16:21:20 +0200 (CEST)
Hi,

What kind of filter would be pages and pages long?
I don't get it, is there a certain protocol for which there's no dissector
yet? Does it ride on top of TCP/UDP or something else. Can't you write a
dissector which you can plugin to Ethereal?

Thanx,
Jaap

On Tue, 28 Mar 2006, Allan Clarke wrote:

> >From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
> >Subject: Re: [Ethereal-dev] Access to generalized dissecting
>
> >Man, you desperately need to look at tethereal. It's text mode
> >ethereal!
> >BTW: Maybe you'll get more feedback in the ethereal users mailing list.
> >
> >Good luck,
> >Jaap
>
> Tethereal does simple filtering only. I need to be able to convert the
> entire contents of captures to another format. Tethereal takes a short
> filter expression on the command line; my filter expression (if it even
> can be expressed as a filter) would be pages and pages long.
>
> I need access to the data just after its been decoded. To me, this looks
> like a development task, not an end user solution. My main problem is
> that if I access the binary capture directly, I have come up with the
> decoding logic myself. If I use an exported format (XML or
> print-to-file), it takes too long to dig through the data.
>
> :(
>
> Thanks for the reply, Jaap.
>
> Allan