Wireshark-dev: Re: [Wireshark-dev] X11/GLX dissector
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sun, 06 Aug 2006 23:59:51 -0700
Max Lapan wrote:

I'm intending to implement dissector for GLX protocol which is an
extension of X11. Could you give an advise how to better implement it
-- as a separate plugin or a patch to existing X11 dissector?
As a separate dissector, regardless of whether it's a plugin or builtin 
dissector.
The best way to do it, in theory, would be to have the X11 dissector 
export a dissector table for extensions.
Unfortunately, the only identifier for an extension that's global, 
rather than, at least in theory, per-session (or per X server) is the 
name of the extension, which is used only in the QueryExtension request; 
that request returns a major opcode for the extension, used in requests 
for that extension, but there's no guarantee that queries with the same 
name will return the same major opcode in all requests.
How were you proposing to recognize GLX requests (especially if your 
network capture doesn't include the QueryExtension request)?