Re: [Wireshark-dev] Exporting FTP objects

2021-12-14 Thread John Thacker
On Tue, Dec 14, 2021 at 1:36 PM Richard Sharpe wrote: > On Tue, Dec 14, 2021 at 10:18 AM Moshe Kaplan > wrote: > > > > I considered using such a data structure, but the challenge there is > that there's no guarantee of a 'file transfer complete' that could be used > to trigger reassembly and add

Re: [Wireshark-dev] Exporting FTP objects

2021-12-14 Thread Richard Sharpe
On Tue, Dec 14, 2021 at 10:18 AM Moshe Kaplan wrote: > > I considered using such a data structure, but the challenge there is that > there's no guarantee of a 'file transfer complete' that could be used to > trigger reassembly and adding to the export objects list. AFAIK, it's also > not possib

Re: [Wireshark-dev] Exporting FTP objects

2021-12-14 Thread Moshe Kaplan
I considered using such a data structure, but the challenge there is that there's no guarantee of a 'file transfer complete' that could be used to trigger reassembly and adding to the export objects list. AFAIK, it's also not possible to have a function to run after all packets were dissected to ge

Re: [Wireshark-dev] Exporting FTP objects

2021-12-14 Thread Richard Sharpe
On Tue, Dec 14, 2021 at 9:34 AM Moshe Kaplan wrote: > > Good afternoon, > > I've been working on MR 1611 for exporting FTP objects. One of the > complexities is that because the transmitted FTP files are spread across > multiple "packets", they need to be reassembled by the export objects 'tap'

[Wireshark-dev] Exporting FTP objects

2021-12-14 Thread Moshe Kaplan
Good afternoon, I've been working on MR 1611 for exporting FTP objects. One of the complexities is that because the transmitted FTP files are spread across multiple "packets", they need to be reassembled by the export objects 'tap' int