Wireshark mailing list archives

Re: Packet direction detection from dissector level


From: "Anders Broman" <a.broman () telia com>
Date: Fri, 12 Feb 2010 07:28:50 +0100



-----Ursprungligt meddelande-----
Från: wireshark-dev-bounces () wireshark org
[mailto:wireshark-dev-bounces () wireshark org] För Daniel Kozar
Skickat: den 12 februari 2010 02:31
Till: wireshark-dev () wireshark org
Ämne: [Wireshark-dev] Packet direction detection from dissector level

Hello,
I'm attempting to write a dissector of a protocol used by a Polish IM
system called Gadu-Gadu. It's my first "larger" C project, so please
don't expect results very soon, but I'll surely try to do my best. So
far, having read the dissector developer documentation
(README.developer) and the more general Developer's Guide, I've
started writing and instantly stumbled upon a problem.

The problem is - is there any way to know if the packet is being sent
by the client or the server? I've encountered it because every packet
in this protocol has a "type" field in its header, but some values
repeat themselves and mean something else when sent by a server and
something else when sent by a client. I'd be thankful for providing
any solutions on how to solve this.

There is a dissector for gadu-gadu in th bugs data base
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3256
is there a solution in that one?
Regards
Anders
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: