[Olaf van der Spek <olafvdspek@xxxxxxxxx>]

On 5/9/05, Ulf Lamping <ulf.lamping@xxxxxx> wrote:
> Olaf van der Spek wrote:
> 
> >Are there examples of such dissectors for common protocols?
> >
> >
> Well, some of the TCP based dissectors (I would guess HTTP for example).
> 
> >And where does the dissector show it's output?
> >
> >
> In the "Packet Details" and "Packet Bytes" panes, just as all the other
> dissectors. It will show the defragmented/desegmented bytes in the
> packet bytes pane (unfortunately, this will become very slow if the
> content will have only a medium size of some KB).

But only for that single packet, right?
 
> >I'd like the output to be available in a single window (like follow TCP stream).
> >
> >
> Yes, I know what you mean. There are a lot of protocols that would
> benefit from a general way of handling such stream conversations.
> 
> That seems to become a common problem, where we might need a generalized
> approach to show such stream content. The follow TCP stream window is
> only a limited, of what a content window could show up...
> 
> Recently, some effort had been done to build graphs for general data
> flow, we might need something similar for the various protocols content.

Would it be possible for the short-term to add a Save Raw Raw option
to safe a raw TCP stream to a binary file?
It'd include not just the data, but also timing information.