Wireshark mailing list archives

What is the best way to create a stateful dissector?


From: Kenny Ho <kho () vixs com>
Date: Tue, 22 Nov 2011 18:19:17 -0500

Hi,

I am writing my first dissector and it needs to dissect a packet base on some information in previous packets.  The 
protocol also allows multiple of these stream mux together.  What is the best way to create a stateful dissector?  From 
the dev guide, I notice there are two different mechanisms that is "stateful" - the tap and the "conversation".  From 
what I can tell, tap seems to be for post-processing of stats only.  So is the "conversation" mechanism the best way to 
implement a stateful dissector?  Did I miss any some other mechanism?

Regards,
Kenny Ho

________________________________
IMPORTANT CONFIDENTIALITY NOTICE
This message and any attached documents contain information from ViXS Systems, Inc. and are confidential and privileged 
and further subject to any confidentiality agreement between the parties. The information is intended to be viewed only 
by the individual(s) or entity(ies) to whom the message is addressed. If you are not the intended recipient, be aware 
that reading, disclosing, copying, distributing or using the contents of this transmission is prohibited. Please notify 
us immediately if you have received this transmission in error, and delete this message along with any attached files.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: