Ethereal-dev: Re: [ethereal-dev] Previous dissector?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ben Fowler <wapdev@xxxxxxxxxxxx>
Date: Sat, 22 Jul 2000 11:19:21 +0100
At 05:57 AM 7/22/00, Gilbert Ramirez wrote:
On Sat, Jul 22, 2000 at 12:34:37AM -0400, Marcus Haebler wrote:
> I was wondering if there is a clean way of getting the offset in the
> frame for the previous dissector in current dissector. E.g. for finding
> the corresponding IP header in the AH dissector.

No, not cleanly. It can be done, however. But why? Most protocols
don't care very much about the previous protocol. In the cases that they
do, they usually only care about one or two specific fields (like the IP
address or IPX address). Are you sure you need to know the previous offset?


If there is a vote on this could I vote 'No' for providing the offset requested.

If the protocols are this dependent, then something is broken somewhere else
and it is ethereal's job (IMHO) to establish the offset at which it has to stop
dissecting and ask for help. In this case it could pop up a dialog box and
ask the user to provide the IP information. Whilst you are giving this, you
might want to ponder what the intended recipient of the packet would make
of it.

If I am sending goods by van from Leeds to Bradford does it matter to the
recipient or end user whether they go via the M62 or the A647.

Ben.



--
Leedsnet - The information resource for Leeds and the West Riding
< URL:http://www.leedsnet.com/mobile/ >