Ethereal-dev: Re: [Ethereal-dev] Access to generalized dissecting

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 29 Mar 2006 00:30:03 -0800
Allan Clarke wrote:

What I'd like to do is develop some kind of a plugin that could be used to walk the dissected packet's tree and selectively export some of the data.

Take a look at tap-protohierstat.c (for an indication of how to write a tap that takes the the protocol tree as an argument) and the stuff in plugins/stats_tree (for an indication of how to write a plugin tap).

Walking the tree is left as an exercise to the reader.