Hi
This patch adds features allowing the user to:
a) Add arbitrary dissectors to the available lists in the “Decode
As” dialog; basically puts a UI on adding a dissector to the available
list in a dissector table.
b) Adds functionality analogous to dissector tables, but
instead of directing by field values, there is a list of display-filter /
sub-dissector pairs. A sub-dissector is called if the display filter is matched
by the packet.
c) Implements this new functionality for several “parent”
dissectors – IP, TCP, UDP, HTTP.
d) Implements this functionality for the data dissector,
giving a “last chance” to direct any unrecognised data.
e) Puts a UI on this, as well as a minimal Lua interface.
In short, this patch aims at giving the user a lot of power
to work with in odd cases; I guess it should be considered “expert”,
as some arbitrary combinations of dissectors may be fatal (e.g. forcing non-IP
data through TCP).
This is a biggish patch, so I have divided it into three:
Epan
-------
Adds the core display-filter / sub-dissector functionality
and exposes some of it through Lua.
UI
---
Extends the existing “Decode As” dialog, and
adds new dialogs for adding arbitrary dissectors to the “Decode As”
dialog, and setting up filter-based dissection. This patch depends on the “epan”
patch.
Doc
----
Updates to the user guide for this functionality.
Cheers
Doug
__________________________________________
Douglas Pratley
t +44 845 050 7640 | f
+44 845 644 5436
a Detica | PO
Box 383 | Horley | Surrey | RH6 7WX | UK
______________________________________________
www.detica.com