Wireshark · Wireshark-dev: [Wireshark-dev] Recursive dissection

["Matt Poduska" <mpoduska.intermec@xxxxxxxxx>]

Hello,

In order to accept into the Wireshark codebase, it was suggested that I recode a dissector plugin I created and submitted a few months ago. I'm curious if there are any suggestions on the best way to use tvb_* functions for dissecting a recursively-defined protocol.

LLRP (the protocol I'm trying to dissect) defines it's messages as a collection of "parameters" and "fields", where parameters can contain other parameters and fields. My current implementation includes buffer "wrapper" functions to deal with maintaining the current location within the tvb as the message (parameters and fields) are parsed. Is there "native" tvb_* functions that do this type of thing already?

Thanks, Matt Poduska

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1957