Since this is so specialized, it might be better to make this into a plugin.
There should be only very minor changes required to make it live down in
./plugins/nfsanonymizer.
While plugins are usually used for PROTOCOLS there is nothing that
prevents you from doing a "fake" protocol plugin that is actually a
tap.
(or if there is something that would prevent plugin taps from working
it should be fixed)
On 3/7/07, Shehjar Tikoo <shehjart@xxxxxxxxxxxxxxx> wrote:
Hi All
Heres the first version of the NFS anonymizer as a tshark tap.
http://www.gelato.unsw.edu.au/~shehjart/patches/nfs_anonymizer_tap.diff
Its a huge 1900 line patch so I am willing to break it up into smaller
pieces but note that its all in one new file, so that might not be
necessary.
Heres the cropped diffstat:
tap-nfsanon.c | 1928
1 file changed, 1928 insertions(+)
As mentioned in a previous thread, this works if tshark is run with
the -z nfsanon command line argument and only when the output is a pcap
dump.
Comments and suggestions will be much appreciated. I'll be putting up
some documentation RSN.
Thanks
Shehjar
_______________________________________________
Wireshark-dev mailing list
Wireshark-dev@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-dev