Re: [Ethereal-dev] [Patch] Add 2 more media types to XML dissector

[Mike Duigou <ethereal@xxxxxxxxxx>]

This sounds really interesting. I took a very small look at the xml 
dissector but still wasn't quite sure how this feature is supposed to 
work. Can you point me in the directions of any extra documentation for 
the XML dissector and any of the more non-obvious features? I promise 
I'll turn whatever I receive/find/learn into a wiki page!  :-)

Mike

LEGO wrote:
> Martin,
>
> I've added heuristics to the XML dissector not long ago, soon after
> Akira Endoh made it to be called by SIP. This should make unnessary to
> add more media-types to that table. More than that:
> There's a DTD parser that is used to create filter fields to be used
> while parsing XML.
>
>  if we have a DTD like:
>
> <!--BEGIN -->
> <? ethereal:protocol proto_name="a" media="application/a"
> description="A" hierarchy="yes" ?>
> <!ELEMENT a (b) >
> <!ELEMENT b (a) >
> <!-- END -->
>
> and a buffer like:
>
> <a>
>   <b> xxx </b>
>  </a>
>
> you could filter that one with: << a.b == "xxx" >>  ???
>
> Luis.
>
> My Fault, Another overdue piece of documentation missing...
>
> On 3/2/06, Martin Mathieson <martin.mathieson@xxxxxxxxxxxx> wrote:
>
> > Hi,
> >
> > This patch adds SIP presence and PoC status documents to the set of
> > known XML media types.
> >
> > Regards,
> > Martin
> >
> >
> > Index: epan/dissectors/packet-xml.c
> > ===================================================================
> > --- epan/dissectors/packet-xml.c        (revision 17443)
> > +++ epan/dissectors/packet-xml.c        (working copy)
> > @@ -154,6 +154,8 @@
> >        "image/svg+xml",
> >        "application/vnd.wv.csp.xml",
> >        "application/resource-lists+xml",
> > +       "application/pidf+xml",
> > +       "application/poc-settings+xml",
> > };
> >
> > static void
> >
> >
> > _______________________________________________
> > Ethereal-dev mailing list
> > Ethereal-dev@xxxxxxxxxxxx
> > http://www.ethereal.com/mailman/listinfo/ethereal-dev
>
>
>
> --
> This information is top security. When you have read it, destroy yourself.
> -- Marshall McLuhan
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev