> A routine is defined like: > > dissect_IP(packet, next-table, gtk-pointers it needs ...) Note that we might want to remove knowledge of GTK from the dissect routines, for a variety of reasons: 1) simplifying the task of writing MxEthereal or KEthereal or whatever, if somebody wants one; 2) possibly making "tethereal"s life a bit easier; 3) going with the scheme I've mentioned here on occasion, wherein, when a capture is loaded, you go through the *entire* capture in sequential order, and dissect all packets in their entirety, attaching a "property list" to the packet with properties corresponding to fields in the protocol and instances of properties corresponding to fields in packets.
Powered by MHonArc 2.6.10