Ethereal-dev: RE: [Ethereal-dev] col_clear for multiple messages in one packet

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Jacques, Olivier (OCBU-Test Infra)" <olivier.jacques@xxxxxx>
Date: Wed, 3 Aug 2005 09:51:02 +0200
> I had the same problem with the DCE/RPC dissector.
> 
> Fortunately, the DCE/RPC dissector keeps it's private field in 
> pinfo->dcectxid which is zero if the DCE/RPC dissector is called the
> first time for this packet and nonzero otherwise.
> 
> This way I could find the first block.
> 
> I don't know if it's the recommended solution, but you could 
> add a field 
> to pinfo which starts with zero and counts the appearances of 
> your blocks.

Thanks for the info. It seems I could had a wiretap pseudo_header for my
protocol and handle it in the same way as dcectxid.

But this seems like a common problem: is there a better - more generic -
solution?

Regards,
Olivier.