Wireshark-dev: Re: [Wireshark-dev] Using Wireshark packet parsers and pretty printers
From: Ulisses Araújo Costa <ulissesaraujocosta@xxxxxxxxx>
Date: Tue, 10 Mar 2009 00:19:09 +0000
On Mon, Mar 9, 2009 at 23:40, Richard Sharpe
<realrichardsharpe@xxxxxxxxx> wrote:
> On Mon, Mar 9, 2009 at 3:34 PM, Ulisses Araújo Costa
> <ulissesaraujocosta@xxxxxxxxx> wrote:
>> I Just want to know what is the function with that I can read a
>> tcpdump file and return the structure of a packet...
>
> The problem is, that is not the way Ethereal works. There is never a
> structure carried around that contains the packet as a set of broken
> down fields, protocol by protocol.
>

No!? Can you explain to me the way Wireshark works?

> --
> Regards,
> Richard Sharpe
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
>



-- 
Ulisses Costa - http://caos.di.uminho.pt/~ulisses/