Wireshark mailing list archives
Re: decoding TCP options
From: Guy Harris <guy () alum mit edu>
Date: Tue, 10 Nov 2009 11:18:41 -0800
On Nov 10, 2009, at 11:05 AM, Sach Kmat wrote:
I have a question regarding tcp options in a dissector. I have a dissector which dissects some specific protocols. I also need to decode http and other common protocols, but only the TCP options part of of these messages because i need to display some specific options, everything else in the common protocols should be displayed a usual. I tried doing a "decode as" for these common protocols and choosing my dissector, but my dissect function does not seem to be called. I was wondering if there is some way to do this. 1. to decode the options part of common protocols or say dissect all packets and look at their options part. 2. once i decode the options part, get wireshark to do the rest of decoding as usual. i really appreciate any help.
As Kary Rogers said the last time you asked:
TCP options are decoded in packet-tcp.c as a part of TCP dissection. To decode your own TCP options you'll need to extend the TCP dissector. You might look at MSS decoding as a simple example. Search for dissect_tcpopt_maxseg in packet-tcp.c.
Perhaps your other e-mail address isn't on the Wireshark list; replies to messages on the list go, by default, only to the list, so if you're not subscribed to the list, you wouldn't have seen Kary Rogers' reply. Hopefully, your GMail address is on the Wireshark list. ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- decoding TCP options Sacheen Kamath (Nov 10)
- Re: decoding TCP options Kary Rogers (Nov 10)
- <Possible follow-ups>
- decoding TCP options Sach Kmat (Nov 10)
- Re: decoding TCP options Guy Harris (Nov 10)
- Re: decoding TCP options Sach Kmat (Nov 11)