Wireshark-dev: Re: [Wireshark-dev] questions about conversations

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Tomasz Noiński <noix@xxxxxxxxx>
Date: Wed, 16 May 2007 16:02:03 +0200 (CEST)
On Wed, 16 May 2007, Anders Broman (AL/EAB) wrote:

> If there is stuff that should only be done once you can use:
> if((!pinfo->fd->flags.visited)

Thanks, that was very helpful.

So now my next problem is:
Where should I store information I get during conversation analysis?
I have this info only on the first run (!pinfo->fd->flags.visited) and I
need it again later, when I display the packet trees.
Is p_add_proto_data()/p_get_proto_data() the only way? (It's quite
cumbersome, I think, as one frame can contain many protocol packets).

Noix