Re: [Wireshark-dev] digging something meaningful out of xmlrpc

2011-02-15 Thread Toni Ruottu
that I do not recognize because it is part of some obscure extension? On Tue, Feb 15, 2011 at 6:54 PM, David Young wrote: > On Tue, Feb 15, 2011 at 03:05:47PM +0200, Toni Ruottu wrote: >> I am using Wireshark to analyse services that use XML-RPC calls to >> communicate. Currently th

[Wireshark-dev] digging something meaningful out of xmlrpc

2011-02-15 Thread Toni Ruottu
I am using Wireshark to analyse services that use XML-RPC calls to communicate. Currently the protocol gets dissected as XML which is fine because it is XML. However the result has lots of bloat that makes it hard for me to analyse the protocol built on top of XML-RPC. Can I somehow write a dissect

[Wireshark-dev] reassembling tcp streams to dissect netstrings

2011-02-14 Thread Toni Ruottu
I am writing a plugin to dissect a TCP stream of netstrings. Examples of netstrings would include 5:hello, and 0:, See http://cr.yp.to/proto/netstrings.txt for details. Method tcp_dissect_pdus takes length of the data as a parameter, which is not a problem for the payload part, but how do I reassem