Ethereal

Re: [Ethereal-dev] Decode as
Google
 
Web Ethereal.com

Home | Introduction | Documentation | Lists | FAQ | Development | Wiki | Bugs

Ethereal-dev: May 2003


On Mon, May 05, 2003 at 11:53:14PM +1000, Ronnie Sahlberg wrote:
> In the DecodeAs.. dialog for say
> TCP or UDP packet only those protocols that are registered to use a TCP/UDP
> port
> will appear.
> 
> I.e.  dissector_add("tcp.port", 111, rpc_tcp_handle);
> will make the RPC protocol available in DecodeAs...

...and will also use it for port 111, which is appropriate for the RPC
dissector (as port 111 is used for an RPC protocol, namely
portmap/rpcbind).

However, it's not always appropriate to specify a port number for a
protocol; I suspect it's not appropriate in Andreas' dissector, for
example.

In those cases, you do

	dissector_add_handle("tcp.port", xxx_handle);

(using the appropriate dissector table and handle).



Powered by MHonArc 2.6.10