Ethereal-dev: Re: [ethereal-dev] filters for ethereal?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: guy@xxxxxxxxxx (Guy Harris)
Date: Thu, 10 Dec 1998 14:59:31 -0800 (PST)
> Instead of interpreting a text definition, wouldn't it be better to
> have decoders as dinamic loading pre-compiled modules?

That's what Microsoft's Network Monitor does.

> I can not
> imagine a newbie creting a decoder module, anyway.  And having
> some example sources would help.

Well, maybe they're not designed to be examples, but, as Ethereal is
open source (or is that "Open Source(TM)"), there's plenty of decoder
source available.

> Since I've already started dreaming, what about packet linking, to
> fully decode segmented packets ?  :)  No, I don't have the faintest
> idea on how to do that, neither on the interface, nor on the
> implementation side.  But it could be useful in some cases.

I have been thinking about that (what got me thinking about working on
packet analyzers in the first place was "snoop"s inability to decode
more than the first frame's worth of data in an NFS READDIR reply), and
have some ideas on how to do it.