On Sat, Apr 14, 2007 at 10:57:21AM -0700, Stephen Fisher wrote:
> On Sat, Apr 14, 2007 at 01:00:24PM +0200, Sake Blok wrote:
>
> > Is there a way to keep some state-information per packet? I don't know
> > exactly what is kept in the conversations, but I guess that it is on a
> > flow basis, not on a packet basis. Are there any other protocols where
> > dissection depends on a per-packet state? How do they do that?
>
> Yes, you can store data "in" each packet. See doc/README.developer,
> section 2.5. Search for the functions mentioned in the readme, either
> p_add_proto_data or p_get_proto_data, to find a dissector that uses it.
OK, I will have a look at it, but I now realise that the state is
even different for different SSL-messages *within* one packet.
Hmmm... there's a little challenge :)
> By the way, thanks for working on this bug in the SSL dissector.
Well, solving the irregularities I find in Wireshark has become..
well... kinda addictive :)
BTW, I did not find a bug on bugzilla about this bug, but you make
it sound like it's a known bug. Is it?
Cheers,
Sake