Ethereal-dev: Re: [Ethereal-dev] reassemble packets to identify a higher level protocol

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Thu, 23 Sep 2004 12:47:11 +0200 (CEST)

On Thu, 23 Sep 2004 bujecas@xxxxxx wrote:

> It's possible to build a dissector or plugin that reassembles packets to
> a higher protocol stream?

Ehhm, check out reassemble.c. So, yes it's possible

> For example, I need to identify a Siebel login
> transaction, it lies on TCP packets, what I want to do is to reassemble
> these packets to identify that it's a Siebel login. If it's possible can
> you give some simple example?

See dissectors which offer the option in the preferences, like X.25, TPKT,
TNS...... Maybe someone can point to a simple example.

> thanks.
hava fun,
Jaap