Wireshark-dev: [Wireshark-dev] [PATCH] User can select dissector based on packet matching displ

From: "Douglas Pratley" <Douglas.pratley@xxxxxxxxxx>
Date: Wed, 31 Jan 2007 18:27:03 -0000

Hi

 

This patch adds features allowing the user to:

 

a) Add arbitrary dissectors to the available lists in the “Decode As” dialog; basically puts a UI on adding a dissector to the available list in a dissector table.

b) Adds functionality analogous to dissector tables, but instead of directing by field values, there is a list of display-filter / sub-dissector pairs. A sub-dissector is called if the display filter is matched by the packet.

c) Implements this new functionality for several “parent” dissectors – IP, TCP, UDP, HTTP.

d) Implements this functionality for the data dissector, giving a “last chance” to direct any unrecognised data.

e) Puts a UI on this, as well as a minimal Lua interface.

 

In short, this patch aims at giving the user a lot of power to work with in odd cases; I guess it should be considered “expert”, as some arbitrary combinations of dissectors may be fatal (e.g. forcing non-IP data through TCP).

 

This is a biggish patch, so I have divided it into three:

 

Epan

-------

Adds the core display-filter / sub-dissector functionality and exposes some of it through Lua.

 

UI

---

Extends the existing “Decode As” dialog, and adds new dialogs for adding arbitrary dissectors to the “Decode As” dialog, and setting up filter-based dissection. This patch depends on the “epan” patch.

 

Doc

----

Updates to the user guide for this functionality.

 

Cheers

 

Doug

__________________________________________
Douglas Pratley
t +44 845 050 7640 | f +44 845 644 5436
a Detica | PO Box 383 | Horley | Surrey | RH6 7WX | UK
______________________________________________
www.detica.com

 




This message should be regarded as confidential. If you have received this email in error please notify the sender and destroy it immediately.
Statements of intent shall only become binding when confirmed in hard copy by an authorised signatory. The contents of this email may relate to dealings with other companies within the Detica Group plc group of companies.

Detica Limited is registered in England under No: 1337451.

Registered offices: Surrey Research Park, Guildford, Surrey, GU2 7YP, England.

Attachment: wp2_proto_epan.tar.gz
Description: wp2_proto_epan.tar.gz

Attachment: wp2_proto_ui.tar.gz
Description: wp2_proto_ui.tar.gz

Attachment: wp2_proto_doc.tar.gz
Description: wp2_proto_doc.tar.gz