Isaac Claymore said:
> Hi folks, I'm new to ethereal, and just had a few problems with the msnms
> display filter:
>
> 1. if the msn messages were encoded with UTF-8, ethereal displayed them
> with something like '\345\222\261'. How can I fix this?
By adding support for UTF-8 strings to Ethereal. (Not a trivial task.
You'd have to handle both GTK+ 1.2[.x], which doesn't take UTF-8 strings
as text, and GTK+ 1.3[.x] and 2.x, which do. You'd also have to do
something sensible when writing to a file or a printer - and, to make any
of this work, you'd have to add a mechanism to specify the character
encoding of a string when it's added to the protocol tree.)
> 2. it seemed that msnms filter is too coarse, it didn't provide finer
> control of the various messages types, e.g it would be nicer if only
messages with
> chat contents get displayed. Did I miss anything?
No, you didn't.
> Or else, can I somehow extend the filter to give me finer filter options?
You might be able to. You'd presumably have to modify th MSN Messenger
dissector to parse the message, in order to determine the message type,
and put that information into the protocol tree.
(The astute reader will note something common to the answers to both
questions. See
http://www.ethereal.com/development.html
for information on developing code for Ethereal....)