Wireshark-dev: Re: [Wireshark-dev] questions about conversations
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Wed, 16 May 2007 12:23:45 -0700
On Wed, May 16, 2007 at 04:02:03PM +0200, Tomasz Noi?ski wrote:

> Where should I store information I get during conversation analysis? I 
> have this info only on the first run (!pinfo->fd->flags.visited) and I 
> need it again later, when I display the packet trees.
> Is p_add_proto_data()/p_get_proto_data() the only way? (It's quite 
> cumbersome, I think, as one frame can contain many protocol packets).

Yes, that is the best way to store data on a per-packet basis for later 
use.  It's stored on a per-dissector/protocol basis, so IP can have its 
own and TCP can have its own, etc.  Or do you mean that you have 
multiple PDUs of the same protocol in each packet?


Steve