tcpdump mailing list archives
Re: capturing packets
From: "Edgar, Thomas" <thomas.edgar () pnl gov>
Date: Tue, 27 Apr 2010 12:10:39 -0700
I have a variable length protocol trailer (which is only known by the end devices) to parse and there is no way to figure it out during the framing process. Is there a way to determine how many bytes the subdissectors actually used after a return from dissector_try_port/heuristic? Is there something in the tvbuff, packet_info, or proto_tree structures that would work? Thanks, Thomas W. Edgar - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
Current thread:
- capturing packets Madhusudan KR (Apr 27)
- Re: capturing packets Gianluca Varenni (Apr 27)
- Re: capturing packets Edgar, Thomas (Apr 27)
- Re: capturing packets Edgar, Thomas (Apr 27)
- Re: capturing packets Gianluca Varenni (Apr 27)