Re: [Ethereal-users] filering of OSPF packets

[Guy Harris <gharris@xxxxxxxxx>]

On Thu, Jul 04, 2002 at 07:48:46AM -0500, Beatriz Silva wrote:
> Does ethereal completly analyses the contents of an OSPF packet ?

I don't know whether its OSPF dissector is complete, but it probably
comes close to analyzing the entire packet, even if it doesn't analyze
all of it.

> After the OSPF packet is grabbed, where is it saved ?

The same place any other packet is saved - in a capture file.

> I am trying to look in the source code, but if somebody could give me
> any hints I would appreciate.

The place where packets are saved in Ethereal is in "capture.c"; see the
"capture_pcap_cb()" routine, which is called by libpcap/WinPcap when a
packet is captured.

The place where the OSPF part of an OSPF packet is dissected is in
"packet-ospf.c".