On Apr 25, 2018, at 10:37 AM, Jason Cohen <kryojen...@gmail.com> wrote:

> It's not a huge deal, but what would be necessary for the dissector to be 
> enabled by default?
> 
> The commit message included:
> Also disable F5ETHTRAILER by default since it doesn't have a discriminating
> heuristic.

It'd need a discriminating heuristic, which means...

> We could probably get the changes needed, but want make sure we understand 
> the requirements.

...that dissect_f5ethtrailer() would have to look at the data it was handed, 
determine whether it corresponds to an F5 Ethernet trailer and, if not, return 
FALSE without dissecting anything.

It would also have to make sure, before looking at any data, that the data is, 
in fact, present and not, for example, cut off by a snapshot length in effect 
when the capture was done.  (If the data isn't present, it should return FALSE, 
as that would mean that some or all of the trailer was cut off by that snapshot 
length.)
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

Reply via email to