Wireshark-bugs: [Wireshark-bugs] [Bug 5771] New: Add heuristic dissector for images and HTTP
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 21 Mar 2011 15:10:39 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5771

           Summary: Add heuristic dissector for images and HTTP
           Product: Wireshark
           Version: SVN
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: doj@xxxxxxxxx


Created an attachment (id=6046)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=6046)
Add heuristic dissector for images and HTTP

Build Information:
works for all.
--
The attachted source code patch will add a heuristic dissector for the image
types PNG, GIF, JFIF. I've registered them for the HTTP protocol, since I was
working on that, but it might make sense for other protocols as well (FTP comes
to mind). Detection of those image formats should be very reliable, since they
all feature a dedicated signature to check against.

To demonstrate the changes I have attachted a sample capture file. It is a
simple web site request from a web browser and the three image formats. I have
manually edited the capture file to invalidate the HTTP Content-Type header (it
is now type "XXXXXXXXXX"), so the HTTP dissector can not work on the media type
as it normally would. With the heuristic patch applied the HTTP response body
is correctly identified as the image.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.