Re: [Wireshark-dev] Tapping Behaviour [Was: Export PDU:s]

2013-05-16 Thread Evan Huus
On Thu, May 16, 2013 at 2:45 PM, Jeff Morriss wrote: > On 05/12/13 09:11, Evan Huus wrote: > >> On Sun, May 12, 2013 at 8:58 AM, Anders Broman >> wrote: >> >>> Well as long as the tap, "taps" after reassembly is done I suppose it >>> does >>> not matter but if y is on top of x why tap y >>> and n

Re: [Wireshark-dev] Tapping Behaviour [Was: Export PDU:s]

2013-05-16 Thread Jeff Morriss
On 05/12/13 09:11, Evan Huus wrote: On Sun, May 12, 2013 at 8:58 AM, Anders Broman wrote: Well as long as the tap, "taps" after reassembly is done I suppose it does not matter but if y is on top of x why tap y and not only X as that would include Y any way? Tangent on the tapping behaviour: t

Re: [Wireshark-dev] Tapping Behaviour [Was: Export PDU:s]

2013-05-12 Thread Evan Huus
On Sun, May 12, 2013 at 3:02 PM, Pascal Quantin wrote: > 2013/5/12 Evan Huus >> >> On Sun, May 12, 2013 at 12:34 PM, Anders Broman >> wrote: >> > If the tap is extracting information from the packet and a dissector bug >> > occurs before that >> > information is extracted that information will a

Re: [Wireshark-dev] Tapping Behaviour [Was: Export PDU:s]

2013-05-12 Thread Pascal Quantin
2013/5/12 Evan Huus > On Sun, May 12, 2013 at 12:34 PM, Anders Broman > wrote: > > If the tap is extracting information from the packet and a dissector bug > > occurs before that > > information is extracted that information will always be missing from the > > tap so having > > "correct" informa

Re: [Wireshark-dev] Tapping Behaviour [Was: Export PDU:s]

2013-05-12 Thread Evan Huus
On Sun, May 12, 2013 at 12:34 PM, Anders Broman wrote: > If the tap is extracting information from the packet and a dissector bug > occurs before that > information is extracted that information will always be missing from the > tap so having > "correct" information from a tap is impossible if the

Re: [Wireshark-dev] Tapping Behaviour [Was: Export PDU:s]

2013-05-12 Thread Pascal Quantin
2013/5/12 Anders Broman > Evan Huus skrev 2013-05-12 15:11: > > On Sun, May 12, 2013 at 8:58 AM, Anders Broman >> wrote: >> >>> Pascal Quantin skrev 2013-05-12 11:08: >>> >>> 2013/5/12 Anders Broman >>> Pascal Quantin skrev 2013-05-10 15:20: 2013/5/5 Anders Broman > Hi

Re: [Wireshark-dev] Tapping Behaviour [Was: Export PDU:s]

2013-05-12 Thread Pascal Quantin
2013/5/12 Evan Huus > On Sun, May 12, 2013 at 8:58 AM, Anders Broman > wrote: > > Pascal Quantin skrev 2013-05-12 11:08: > > > > 2013/5/12 Anders Broman > >> > >> Pascal Quantin skrev 2013-05-10 15:20: > >> > >> 2013/5/5 Anders Broman > >>> > >>> Hi, > >>> I have added a basic implementation m

Re: [Wireshark-dev] Tapping Behaviour [Was: Export PDU:s]

2013-05-12 Thread Anders Broman
Evan Huus skrev 2013-05-12 15:11: On Sun, May 12, 2013 at 8:58 AM, Anders Broman wrote: Pascal Quantin skrev 2013-05-12 11:08: 2013/5/12 Anders Broman Pascal Quantin skrev 2013-05-10 15:20: 2013/5/5 Anders Broman Hi, I have added a basic implementation making it possible to export higher

[Wireshark-dev] Tapping Behaviour [Was: Export PDU:s]

2013-05-12 Thread Evan Huus
On Sun, May 12, 2013 at 8:58 AM, Anders Broman wrote: > Pascal Quantin skrev 2013-05-12 11:08: > > 2013/5/12 Anders Broman >> >> Pascal Quantin skrev 2013-05-10 15:20: >> >> 2013/5/5 Anders Broman >>> >>> Hi, >>> I have added a basic implementation making it possible to export higher >>> level P