> > I've updated and extended the ICQ decoder a lot further. Included in > > this message is the diff, I hope it can be applied... > Done (except for the additional TCP port number; we really need to add > the ability to specify "dissect port XXX as YYY" at run time...). I'm all in for that. I need to set TCP port numbers at runtime, 'cause ICQ tends to allocate these on the fly. It publishes them in the UDP traffic. I'll postpone adding TCPclient-client connections until there is a way to dynamically 'allocate' port numbers. Grtz -- Kojak
Powered by MHonArc 2.6.10