Ethereal-dev: Re: [Ethereal-dev] TDS decoding

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Wed, 21 Nov 2001 15:44:00 -0800 (PST)
> Any thoughts on the changes to packet-iscsi.c? The netlib stuff gets 
> clobbered by it if left unpatched.

I'd have to go dig up draft 08 to see whether iSCSI would get clobbered
by it if patch (i.e., if the heuristics would reject valid iSCSI
packets).

> Is there a way to arrange the order in which the heuristics get called
> so that netlib has the first crack at the packet?

No.  A scheme in which, for example, a heuristic could be classified as
"strong" or "weak", with false positives being rare for "strong"
heuristics, might work, with the "strong" heuristic dissectors checked
before the "weak" ones (and possibly with the "weak" ones checked
*after* port numbers are checked).  That could even be done without code
changes to the core of Ethereal - you'd just have two heuristic lists
for, say, TCP, with "strong" heuristics on one list and "weak"
heuristics such as iSCSI's on another list.