Wireshark · Wireshark-dev: Re: [Wireshark-dev] using pinfo structure to save data after first iteration

[Anders Broman <anders.broman@xxxxxxxxxxxx>]

Hi,

Adding SRTP decryption to Wireshark would be a valuable enhancement so you should consider working through gerrit so we can see your code and comment on it. Glancing at the RTP code there seems to be some preparations done to handle SRTP are you using that?

I would look at decrypting the payload at the first iteration and save whatever data is needed in the conversation structure or in per packet data to use it in subsequent dissection of the frame. Are you adding the keys via a preference?

Regards

Anders

 

From: wireshark-dev-bounces@xxxxxxxxxxxxx [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of koundinya poluri
Sent: den 30 juni 2015 08:34
To: wireshark-dev
Subject: [Wireshark-dev] using pinfo structure to save data after first iteration

 

Hi guys,

 

I am trying to write a dissector for SRTP and need help in saving decrypted data in a way so as to pass it on to the dissector after the first iteration as I have trouble keeping track of the roc which changes after there is a rollover where the packets from first cycle are also being treated as part of second cycle (i.e the roc is incremented by 1).So I tried to use the pinfo strucure but found NO SUCCESS.Can someone please comment on this if it is doable,If so how do I go about it.or atleast point me in the right direction.Thanks a lot!

 

-koundinya