Wireshark · Wireshark-dev: Re: [Wireshark-dev] [PATCH] Dissector hooks: Small and Simple additions

[Guy Harris <guy@xxxxxxxxxxxx>]

On Mar 1, 2007, at 4:57 PM, Shehjar Tikoo wrote:

> One drawback of a per-field hook could be that hooks which need a  
> global
> view or state of the full message might not get access to the needed
> fields.

Couldn't the private data passed to the hook be used to store the kind  
of state needed for that?

Also, can this be done with the existing tap mechanism, by searching  
for particular fields in the generated protocol tree?