Max Lapan wrote:
I'm intending to implement dissector for GLX protocol which is an
extension of X11. Could you give an advise how to better implement it
-- as a separate plugin or a patch to existing X11 dissector?
As a separate dissector, regardless of whether it's a plugin or builtin
dissector.
The best way to do it, in theory, would be to have the X11 dissector
export a dissector table for extensions.
Unfortunately, the only identifier for an extension that's global,
rather than, at least in theory, per-session (or per X server) is the
name of the extension, which is used only in the QueryExtension request;
that request returns a major opcode for the extension, used in requests
for that extension, but there's no guarantee that queries with the same
name will return the same major opcode in all requests.
How were you proposing to recognize GLX requests (especially if your
network capture doesn't include the QueryExtension request)?