On Fri, Nov 08, 2002 at 03:07:35PM -0500, Devin Heitmueller wrote: > Wow, what a pain. It's surprising how much you have to know about the > protocol in order to get Ethereal to dissect it properly. It's a > catch-22 -- you have to understand the protocol in order to know how to > setup the dissector, but many people use the dissector to learn the how > the protocol works. > > Perhaps a FAQ item or something in the documentation might save some > traffic on the mailing list. Or perhaps some way to set all the reassembly options at once - i.e setting the reassembly for dcerpc implies reassembly for the lower protocol layers. Tim.
Powered by MHonArc 2.6.10