Hi, I have started on a new dissector, more about that later. This one has multiple messages (PDUs) in one TCP segment ... If I dissect them correctly, which sould be: [+] TCP ....... [+] NEW DISSECTOR +--[+] PDU 1 +--[+] PDU 2 Filtering might be a bit of a problem, in that each PDU is likely to have the same field types, like new-proto.cmd or new-proto.seq and so on ... Seems it might be confusing ... I guess that the COL_INFO field will have to contain a list of all the messages that were decoded ... Regards ------- Richard Sharpe, sharpe@xxxxxxxxxx Samba (Team member, www.samba.org), Ethereal (Team member, www.zing.org) Contributing author, SAMS Teach Yourself Samba in 24 Hours Author, Special Edition, Using Samba
Powered by MHonArc 2.6.10