ireshark
Subject: Re: [Wireshark-dev] Register dissector to MAC address
Maynard, Chris wrote:
> Then there's the downside of changing the existing behavior - meaning
> pretty much every packet will have to be scanned to determine if it
> contains the MagicPacket or not since theoreti
Maynard, Chris wrote:
> Then there's the downside of changing the existing behavior - meaning
> pretty much every packet will have to be scanned to determine if it
> contains the MagicPacket or not since theoretically, the MagicPacket can
> occur within ANY packet (i.e., ANY Ethertype).
However,
Michael A. McCartney wrote:
> Changing it to what we discussed would break what I have
> and worst, probably would force me to hack packet-eth which
> I'd rather not do. Seems eth is a special case where both
> the "framing" needs to be heuristic (as is now and used) as
> well as the "payload" (n
n packet-eth.c, but I'm not entirely sure, based on the comments
>>
> in
>
>> the code.
>>
>>
>>>
>>> First, compare the way a dissector like packet-udp.c tries the
>>>
>>>
>> heuristic dissectors,
CTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Michael A.
McCartney
Sent: Monday, December 17, 2007 11:08 PM
To: Developer support list for Wireshark
Subject: Re: [Wireshark-dev] Register dissector to MAC address
Chris,
Orignal poster wanted a way to select the frames
based on MAC signature - that w
s
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Michael A.
> McCartney
> Sent: Monday, December 17, 2007 9:14 PM
> To: Developer support list for Wireshark
> Subject: Re: [Wireshark-dev] Register dissector to MAC address
>
> Ch
doesn't work? If it is a bug, then once that's corrected,
then that would be the better way to register both WOL and the original
poster's dissector - heuristically.
>
> - Chris
>
>
>
> From: [EMAIL PROTECTED] on behalf of Stephe
that's corrected, then that would be the
> better way to register both WOL and the original poster's dissector -
> heuristically.
>
> - Chris
>
>
>
> From: [EMAIL PROTECTED] on behalf of Stephen Fisher
> Sent: Mon 11/12/2007 1
Betreff: RE: [Wireshark-dev] Register dissector to MAC address
At first glance, packet-eth.c seems to have heuristic support, but it
doesn't appear to work, at least not how I expected it to. For example,
originally for the WOL dissector, I registered as I do for UDP, n
at would be the better way to
register both WOL and the original poster's dissector - heuristically.
- Chris
From: [EMAIL PROTECTED] on behalf of Stephen Fisher
Sent: Mon 11/12/2007 12:50 PM
To: Developer support list for Wireshark
Subject: Re: [Wireshark-dev] Re
On Mon, Nov 12, 2007 at 12:37:10PM -0500, Maynard, Chris wrote:
> Can anyone think of a reason NOT to add heuristic dissection support
> to packet-eth.c? Or does anyone have a better/alternate way to solve
> this?
My first thought is that the original poster's dissector could be a
heuristic that
L PROTECTED] on behalf of [EMAIL PROTECTED]
Sent: Mon 11/12/2007 12:25 PM
To: wireshark-dev@wireshark.org
Subject: [Wireshark-dev] Register dissector to MAC address
Hi,
I have an application where I receive specially formed frames from a specific
unique MAC address.
Is it possible to regis
Hi,
I have an application where I receive specially formed frames from a
specific unique MAC address.
Is it possible to register my dissector to a MAC address?
All I was able to do was registering a dissector to an ethertype like
follows:
dissector_add("ethertype", 0x88ff, test_dissector
13 matches
Mail list logo
