Wireshark · Wireshark-dev: [Wireshark-dev] read protocol tree in a tap interface

["蒋品" <jiangpin.minstrel@xxxxxxxxx>]

Hi,

             I am developing a Tap interface. Can I read the edt->tree in a tap interface?

 

             I added tap_queue_packet just before the return dissect function.  But I still can't get the protocol tree of the dissection.

 

             If I add specific field of the protocol to the display filter, thus I can read the field in the edt->tree.

 

             Anyway to read all fields ( all dissection result ) in a tap interface?

 

 

A tap packet interface:

           

             static int rpcstat_packet(void *arg, packet_info *pinfo, epan_dissect_t *edt _U_, const void *arg2)

 

 

             Thank you in advance. Looking forward to your replys

 

BRs, Richard