Ethereal-users: Re: [Ethereal-users] filering of OSPF packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 4 Jul 2002 14:00:39 -0700
On Thu, Jul 04, 2002 at 07:48:46AM -0500, Beatriz Silva wrote:
> Does ethereal completly analyses the contents of an OSPF packet ?

I don't know whether its OSPF dissector is complete, but it probably
comes close to analyzing the entire packet, even if it doesn't analyze
all of it.

> After the OSPF packet is grabbed, where is it saved ?

The same place any other packet is saved - in a capture file.

> I am trying to look in the source code, but if somebody could give me
> any hints I would appreciate.

The place where packets are saved in Ethereal is in "capture.c"; see the
"capture_pcap_cb()" routine, which is called by libpcap/WinPcap when a
packet is captured.

The place where the OSPF part of an OSPF packet is dissected is in
"packet-ospf.c".