Ethereal-dev: [Ethereal-dev] Used ports

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Nicholas, John S" <John.Nicholas@xxxxxxxxxxxxxx>
Date: Fri, 20 Apr 2001 15:09:10 -0700
Hi,

I was wondering what you do if your sub-dissector (tcp and udp) is using a port
defined by another dissector.  In this case we are using ports 5060 
(also used by packet-sip.c) and 5050 (also used by packet-yhoo.c).

This new protocol is used on a flight test airplane for data acquisition, so
it is unlikely to ever be used by anyone else.  I suppose I could have them
change the use of these ports, but I was wondering if there was a way to 
"remove" the other protocols.  I suppose I could just not build them in, but was
looking for a more elegant solution.

Another question that shows my ignorance.......
Embedded in these packets is a SYNC pattern (following is a header).

	Packet Exchange Protocol (PEP)
	    SYNC Pattern: 0xd00bed00
	    Message Type: GET_DB_RECORD_ID_RSPREQUIRED - Get Database Record ID (request) (0x00000471)
	    Message Length (bytes): 184

It is the very first thing after the TCP or UDP header.  Is there a way to use this sync pattern instead of the port
to identify this packet as being associated with this dissector.

Thanks for your time