tcpdump mailing list archives

Re: capturing packets


From: "Edgar, Thomas" <thomas.edgar () pnl gov>
Date: Tue, 27 Apr 2010 12:10:39 -0700

I have a variable length protocol trailer (which is only known by the end devices) to parse and there is no way to 
figure it out during the framing process.  Is there a way to determine how many bytes the subdissectors actually used 
after a return from dissector_try_port/heuristic?  Is there something in the tvbuff, packet_info, or proto_tree 
structures that would work?

Thanks,

Thomas W. Edgar
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: