Wireshark · Ethereal-dev: [Ethereal-dev] Re: New dissector: STANAG 5066

[ronnie sahlberg <ronniesahlberg@xxxxxxxxx>]

Hi,

The dissector looks really good.

1, Do you have any sample captures of this protocol we can use for
fuzz testing and also put on the sample captures page (i assume few
people have access to an exotic protocol like this )?

2, Do you plan to add any heuristics to this protocol to verify that
it is indeed your protocol?
Probably best to add that in the dissect_..._tcp() function before
spawning it off to tcp_dissect_pdus().
This would help when there is a dissector port conflict, i.e. when
there is traffic between your well known port and the other port is
another well known port such as smtp or similar.
This allows ethereal to try both your port and the other dissector and
tell which protocol it really is.



On 10/14/05, M.P. Andriesse <menno.andriesse@xxxxxxxxxxxxx> wrote:
> Oops...
>
> Actually attaching the file does work better...
>
> --
> Menno Andriesse
>
...