Ethereal-dev: Re: [Ethereal-dev] Van Jacobson dissector.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Wed, 19 Dec 2001 11:44:28 -0800 (PST)
> IP/TCP and up.  VJ does some pretty horrific layering violations for the 
> sake of performance.  The idea here is (more for tetherial)

Why do Ethereal and Tethereal differ here?

> you end up 
> with what looks like a ppp packet that was never compressed in the 
> uncompressed tab framing info and all, otherwise the uncompressed packet 
> tab contains only IP and up.

So presumably all you need is information from the PPP header; the PPP
dissector has no clue what information appeared *before* the PPP header,
and neither does the VJ decompressor.

That information can be supplied using the standard Ethereal mechanism
for that, wherein the calling dissector sets "pinfo->private_data" to
point to a local data structure before calling the subdissector.