Wireshark-users: Re: [Wireshark-users] Question on Decoding packet withinsertedproprietary header
From: "Luis Ontanon" <luis.ontanon@xxxxxxxxx>
Date: Wed, 14 Mar 2007 11:16:09 +0100
On 3/14/07, Douglas Pratley <Douglas.pratley@xxxxxxxxxx> wrote:
Someone has updated the UI for this preference in the latest Wireshark
so that it's a bit clearer. I'm not sure what version you are using.

I did,
BTW changes are post 0.99.5
in 0.99.5 there is DLT_User_A ... DLT_User_D in the preferences are
for each one you have the parameters.
in 0.99.6 (dev) there's only one DLT_User preference that links to a
user table where the same parameters can be set.

WHat I have thought is that it would be feasable to modify the current
user-dlt "dissector" to add 2 parameters instead of the DLT in the
table, one being a dissector table and the other the value against
which to match in that table and then have the same kind of
"dissection" as it is done today just against the "wtap.encap" table
against every dissector table. We even get the possibility to have
persistent user decodes for "free".

By now I'm way too busy to take care of it can someone "ping" me in
few weeks to remind me to do so.


Doug

--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan