Wireshark-commits: [Wireshark-commits] rev 30076: /trunk/ /trunk/tools/: fuzz-test.sh /trunk/: tsha

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: krj@xxxxxxxxxxxxx
Date: Tue, 22 Sep 2009 19:28:01 GMT
http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=30076

User: krj
Date: 2009/09/22 12:28 PM

Log:
 Add initial support for "two pass analysis" in tshark. This allows tshark to arrive at the same protocol tree as the Wireshark GUI. Before this change tshark only supported a single scan over the file. This effectively means that packets cannot use data that are gathered from frames that appear after the current frame. By scanning twice we give the dissector the opportunity to make forward references.

Directory: /trunk/tools/
  Changes    Path            Action
  +7 -3      fuzz-test.sh    Modified

Directory: /trunk/
  Changes    Path          Action
  +277 -25   tshark.c      Modified