Would it be reasonable to have a split-mode dissector? i.e. register both a
heuristic and non-heuristic dissector for the same protocol, and just have
one call the other?
-- Nathan
------------------------------------------------------------
Nathan Neulinger EMail: nneul@xxxxxxx
University of Missouri - Rolla Phone: (573) 341-4841
Computing Services Fax: (573) 341-4216
> -----Original Message-----
> From: Guy Harris [mailto:gharris@xxxxxxxxx]
> Sent: Tuesday, October 30, 2001 10:49 PM
> To: Nathan Neulinger
> Cc: ethereal-dev@xxxxxxxxxxxx
> Subject: Re: [Ethereal-dev] yhoo broke?
>
>
> On Tue, Oct 30, 2001 at 09:31:07PM -0600, Nathan Neulinger wrote:
> > What is packet-yhoo.c missing that would get it added to
> the decode-as
> > list?
>
> A non-heuristic dissector, and a call to
> "conv_dissector_add()" passing it a pointer to the
> non-heuristic dissector.
>
> Heuristic dissectors don't show up in the "Decode As" list;
> protocols in that list have to have dissectors that return
> "void", not "gboolean".
>
> If you want it to show up in the "Decode As" list, write a
> non-heuristic dissector, have the heuristic dissector call it
> if the packet passes the test, and register the non-heuristic
> dissector in the "tcp" or "udp" conversation-dissector list
> with "conv_dissector_add()".
>
