Wireshark-dev: Re: [Wireshark-dev] dissection of packets with unknown format (LDP/MPLS/PWE)
From: Alexandre Abreu <alxabreu@xxxxxxxxx>
Date: Mon, 28 Apr 2008 22:39:24 +0100
Hi

I'll have a look at those and hopefully that will give me the clues I need.

Tks
AA

On Apr 28, 2008, at 4:14 PM, Richard van der Hoff wrote:

Alexandre Abreu wrote:
Hi.

Has anyone ever found a case where the successful dissection of one
protocol depends on what was negotiated in another protocol?

Yes, this is done for RTP traffic, which is set up via H.245 or SIP/ SDP.

I guess my question comes down to: how can we store the information
from dissection of one protocol so that it can be used to dissect
another protocol, while still following wireshark's dev guidelines.

Have a look at rtp_add_address (in packet-rtp.c), which is called from
packet-sdp.c and packet-h245.c.

Cheers

Richard
_______________________________________________
Wireshark-dev mailing list