Ethereal-dev: [Ethereal-dev] COL_PROTOCOL problem

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Martin Thomas <martin_a_thomas@xxxxxxxxx>
Date: Mon, 19 Feb 2001 12:51:00 -0800 (PST)
I am trying to figure out a problem I have with the
COL_PROTOCOL field.. I expected that the last
dissector
to fill in this field using col_set_str would override
all previous dissectors but that is not what I am
seeing.

The background is this: I have rewritten the tpkt
dissector from Andreas Sikkema (and called it RFC1006)
so that it stands alone from q931. So far, so good.
Then I added COTP as a sub-dissector. This works..
(packets are dissected) but the COL_PROTO shows
RFC1006.. unless I put that as a filter term, in which
case, the protocol field changes to COTP.

Over the weekend, I wrote a rudimentary OSI Session
Protocol (aka OSISP.. better name anyone?) and added
that as a heuristic subdissector to COTP. This also
works.. SPDUs are decoded into PIs and PGIs.. but as
with COTP, the protocol field shows RFC1006 until a 
filter term is entered.

Am I missing something obvious?

Thanks/ Martin



__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail - only $35 
a year!  http://personal.mail.yahoo.com/