On Sat, Oct 27, 2012 at 1:55 PM, Dirk Jagdmann <doj@xxxxxxxxx> wrote:
>
> Those two protocols are indeed made to look like HTTP headers. Have you tried to
> make the following settings in the HTTP preferences:
> enable "Reassemble HTTP headers..."
> disable "Reassemble HTTP bodies..."
>
> and add the TCP ports you're interested to the list. Now of course those
> protocols will be shown as HTTP, but it should give some results. If that
> doesn't work well, you'll have to look into your own custom dissector.
>
Dirk,
Yes, I have tried this. While there are various issues with this
approach the most significant appears to be the lack of a
Content-Length header with AMI.
So yes, I'm still interested in sponsoring the work of a custom
dissector for these protocols :).
--
Kristian Kielhofner