Wireshark-bugs: [Wireshark-bugs] [Bug 6446] tshark not make possible display description of IMAP
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6446
Michael Mann <mmann78@xxxxxxxxxxxx> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #7286| |review_for_checkin?
Flag| |
--- Comment #3 from Michael Mann <mmann78@xxxxxxxxxxxx> 2011-10-21 06:11:44 PDT ---
Created an attachment (id=7286)
--> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=7286)
New IMAP filters
Added filters to the IMAP protocol in line with how Wireshark was parsing them
(a basic proto_tree_add_tree to proto_tree_add_item conversion). I'm not
familiar with the protocol (and the IMAP protocol doesn't appear to have an
official spec), so any comments on the fields chosen is welcome. Note that I
"repurposed" imap.request and imap.response.
imap.isrequest - TRUE if request, FALSE if response
imap.line - A single line (as determined by \r\n) of an IMAP message
imap.request_tag - The first token of a IMAP request message line
imap.request - The remainder of a (request) line after imap.request_tag
imap.response_tag - The first token of a IMAP response message line
imap.response - The remainder of a (response) line after imap.response_tag
Fuzztested with the previously attached trace.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
