Ethereal-dev: Re: [Ethereal-dev] New dissector: JPEG File Interchange Format(JFIF)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 7 Jan 2004 12:08:07 -0800

On Jan 7, 2004, at 11:59 AM, Gilbert Ramirez wrote:

Inside dissect_packet(), instead of calling calling the 'frame'
dissector, a new dissector called 'file' would be called. Whereas
'frame' shows meta-data about the frame (size, capture time, etc), the
'file' protocol shows meta-data about the file (filename, size, mtime,
etc.). The JFIF and GIF dissectors are registered to either wtap_encap
or something new (wtap_non_packet_file)

Or "media_type". Have Wiretap supply a media type string for a WTAP_ENCAP_MEDIA encapsulation. (Of course, that won't work for files whose contents *don't* have a media type - but given that KDE and GNOME, at least, tend to use media types as file types, I suspect file types that don't have official media types will be given media types by the UNIX+X desktop folks. I also suspect that most of the media dissectors will be for data with media types, as they'll probably mostly be written for use when dissecting HTTP and the like.)