Ethereal-dev: RE: [Ethereal-dev] Can I force data into a dissector from below ?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Michael Lum" <mlum@xxxxxxxxxxxxx>
Date: Mon, 3 Nov 2003 10:19:06 -0800
Thanks Michael.

> -----Original Message-----
> From: Michael Tuexen [mailto:Michael.Tuexen@xxxxxxxxxxxxxxxxx]
> Sent: Monday, November 03, 2003 9:42 AM
> To: mlum@xxxxxxxxxxxxx
> Cc: Ethereal
> Subject: Re: [Ethereal-dev] Can I force data into a dissector from below
> ?
> 
> 
> The way I 'solved' this problem (with a proprietary version of SUA)
> that put the code into ethereal and made it configurable via
> preferences. Later, my former company switched to SUA and I took
> the code out of ethereal.
> 
> You could just publish the dissector for the prop. protocol. Even
> if you have some IPRs somewhere, usually you do not have it on
> the packet format...
> 
> Best regards
> Michael
> 
> On Nov 3, 2003, at 18:28 Uhr, Michael Lum wrote:
> 
> > Exactly.
> >
> > My current building version of ethereal is 0.9.14 and I have a
> > modification in my copy of BSSAP to call 'heur_dissector_add()'
> > to the proprietary protocol.
> >
> >
> >> -----Original Message-----
> >> From: Michael Tuexen [mailto:Michael.Tuexen@xxxxxxxxxxxxxxxxx]
> >> Sent: Monday, November 03, 2003 9:17 AM
> >> To: mlum@xxxxxxxxxxxxx
> >> Cc: Ethereal
> >> Subject: Re: [Ethereal-dev] Can I force data into a dissector from 
> >> below
> >> ?
> >>
> >>
> >> How does your proprietary stack look like?
> >> BSSAP/prop proto/TCP/IP?
> >>
> >> Best regards
> >> Michael
> >>
> >> On Nov 3, 2003, at 17:32 Uhr, Michael Lum wrote:
> >>
> >>> The company I work for has a proprietary protocol used to carry
> >>> SCCP traffic over IP.  I have a dissector for it but don't want
> >>> to check-it in because it is proprietary and no one else would
> >>> want it.
> >>>
> >>> Is there a way I can write a plugin that will attach to TCP
> >>> dissect and then force the data into the BSSAP dissector.
> >>>
> >>> I don't believe I can change the BSSAP dissector because it
> >>> will fail if the dissector below doesn't exist, right?
> >>>
> >>> The other option would be to change the BSSAP dissector to
> >>> a plugin so that I can replace it easily.
> >>>
> >>> Thanks.
> >>>
> >>> --
> >>> Michael Lum                          Architect
> >>> 4600 Jacombs Road               (604) 276-0055
> >>> Richmond, B.C.
> >>> Canada V6V 3B1
> >>>
> >>> Telos Technology
> >>> Winner of the 2003 GSM Association Award
> >>> for Technology Innovation
> >>> Best Infrastructure
> >>>
> >>> _______________________________________________
> >>> Ethereal-dev mailing list
> >>> Ethereal-dev@xxxxxxxxxxxx
> >>> http://www.ethereal.com/mailman/listinfo/ethereal-dev
> >>>
> >