Wireshark mailing list archives
display filtering + how to analyze some TCP packets
From: Teto <mattator () gmail com>
Date: Tue, 25 Oct 2011 17:26:32 +0200
Hi,
1st question:
It took me some time but thanks to README.developer I think I
understand how display filtering works now. I was wondering if it was
possible to update an item's header field id after its creation. For
example:
proto_item* pi = proto_tree_add_text(subtree,tvb,offset,4,"Type: %u",type);
set_item_header_field(&hf_my_field_id); /// for example. Does any
equivalent function exists
And my 2nd question would be:
There is some TCP traffic going on random ports concerning the
protocol I analyze. How can I assign this traffic to my dissector ? It
needs to analyze the first bytes to know if it matches my protocol.
I solved the problem for udp (it's a predefined port):
dissector_add_uint("udp.port", ENERGYWISE_UDP_DPORT, energywise_udp_handle);
but I dunno for tcp.
Once I've recognized the first packet, I read that I had to start a
conversation.
Regards
Matt
Nb: At first I wanted to dissociate both topics but I didn't want to
spam your inboxes.
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- display filtering + how to analyze some TCP packets Teto (Oct 25)
- Re: display filtering + how to analyze some TCP packets Guy Harris (Oct 25)
- Re: display filtering + how to analyze some TCP packets Teto (Oct 26)
- Re: display filtering + how to analyze some TCP packets Guy Harris (Oct 27)
- Re: display filtering + how to analyze some TCP packets Teto (Oct 28)
- Re: display filtering + how to analyze some TCP packets Teto (Oct 26)
- Re: display filtering + how to analyze some TCP packets Guy Harris (Oct 25)
