Wireshark-dev: Re: [Wireshark-dev] Catch 22 in SSL dissector?
From: Sake Blok <sake@xxxxxxxxxx>
Date: Sat, 14 Apr 2007 20:16:04 +0200
On Sat, Apr 14, 2007 at 10:57:21AM -0700, Stephen Fisher wrote:
> On Sat, Apr 14, 2007 at 01:00:24PM +0200, Sake Blok wrote:
> 
> > Is there a way to keep some state-information per packet? I don't know 
> > exactly what is kept in the conversations, but I guess that it is on a 
> > flow basis, not on a packet basis. Are there any other protocols where 
> > dissection depends on a per-packet state? How do they do that?
> 
> Yes, you can store data "in" each packet.  See doc/README.developer, 
> section 2.5.  Search for the functions mentioned in the readme, either 
> p_add_proto_data or p_get_proto_data, to find a dissector that uses it.

OK, I will have a look at it, but I now realise that the state is
even different for different SSL-messages *within* one packet.
Hmmm... there's a little challenge :)

> By the way, thanks for working on this bug in the SSL dissector.

Well, solving the irregularities I find in Wireshark has become..
well... kinda addictive :)

BTW, I did not find a bug on bugzilla about this bug, but you make
it sound like it's a known bug. Is it?

Cheers,


Sake