Re: decoding TCP options

[Kary Rogers <kary.rogers () gmail com>]

TCP options are decoded in packet-tcp.c as a part of TCP dissection. To
decode your own TCP options you'll need to extend the TCP dissector.  You
might look at MSS decoding as a simple example.  Search for
dissect_tcpopt_maxseg in packet-tcp.c.

-kary

On Tue, Nov 10, 2009 at 3:27 AM, Sacheen Kamath <sacheen () gmail com> wrote:

> Hi,
>
> I have a question regarding tcp options in a dissector. I have a
> dissector which dissects some specific protocols. I also need to
> decode http and other common protocols, but only the TCP options part
> of of these messages because i need to display some specific options,
> everything else in the common protocols should be displayed a usual. I
> tried doing a "decode as" for these common protocols and choosing my
> dissector, but my dissect function does not seem to be called.
>
> I was wondering if there is some way to do this.
> 1. to decode the options part of common protocols or say dissect all
> packets and look at their options part.
> 2. once i decode the options part, get wireshark to do the rest of
> decoding as usual.
>
> i really appreciate any help.
>
> regards,
> sk
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe



-- 
Kary Rogers

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe