Wireshark-dev: Re: [Wireshark-dev] About when do Tap listeners get called (and report a typo in
On Thu, Feb 5, 2009 at 11:37 PM, Jeff Morriss
<jeff.morriss.ws@gmail.com> wrote:
yami wrote:
> Hi dev,
>
> In doc/READE.tapping, section 'WHEN DO TAP LISTENERS GET CALLED' says:
>
> Tap listeners are only called when Wireshark reads a new capture for
> the first time or whenever Wireshark needs to rescan/redissect
> the capture.
>
> Could anyone tell me the code place to ensure this? I could not find the
> related code.
Well, I don't think it's a case of ensuring that but rather a question
of when Wireshark needs to redissect a packet: whenever Wireshark needs
to (re)dissect a packet then it will call the dissectors again which
will in turn send the packet to the taps.
From code in file.c:add_packet_to_packet_list(), it seems to me that a packet is ALWAYS dissected by this function. Is that right? If it is the case, then README.tapping probably is not right.
Am I missing anything here?
> BTW, in section 'TAP LISTENER' 2nd sentence, 'sInterfacing' should be
> 'Interfacing'.
Fixed, thanks.
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
