Hi! In the tacacs+ dissector I'm writing, i use the conversation with NO_PORT2 ( btw, I'm curious, why NO_PORT_2 in conversation_new and NO_PORT_B in find_conversation? :) ) to match the connection between a server (port 49) and a client (whatever port), and find the right encryption key. After I create the conversation, I set the dissector, so it will be called from try_conversation_dissector, after a successfull find_conversation. In the dissector, is it possible to retrieve the conversation pointer without redoing the find_conversation ? And there is a way to create a "flags" subtree, like the one of tcp, but without creating all the variable, i.e. only tcp.flags, but not tcp.flags.* ? Last question, with gtk2 all the subtree, for example the tcp.flags, keep closing while browsing through the packet in the Top Pane, with gtk1 they stay open. There is an hidden switch I missed ? Thanks.. -- Ciao, Emanuele
Powered by MHonArc 2.6.10