Ethereal-users: RE: [Ethereal-users] TCP "Data" ?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Tony Scarola <TONYS@xxxxxxx>
Date: Wed, 19 Nov 2003 16:51:01 -0500
Guy,

Okay... Is this (writing a dissector) something a "non programmer" can do?
And if so, are there any instructions available for writing a dissector?

Yes, I meant "dissect".

Thank you again,

Tony

-----Original Message-----
From: Guy Harris
To: Tony Scarola
Cc: 'ethereal-users@xxxxxxxxxxxx'
Sent: 11/19/2003 4:36 PM
Subject: Re: [Ethereal-users] TCP "Data" ?


On Nov 19, 2003, at 1:32 PM, Tony Scarola wrote:

> Do you know if it is possible to simply tell Ethereal that a certain 
> port
> maps to a specific application (i.e. port 5900 is [most likely] VNC)?

Yes.  Step 1 is to write a VNC dissector.  Step 2 is to make it 
register itself for TCP port 5900. :-)

> I see that there is a "decode as" option, however, do not see any way 
> to
> change or develop custom protocols for "unknown ports". I would think 
> there
> might be an easy way for non-programmers to add custom ports.

What do you mean by "change or develop custom protocols"?  Do you mean 
*dissect* those protocols?