Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 6446] tshark not make possible display description of IMAP

Date: Fri, 21 Oct 2011 06:11:46 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6446

Michael Mann <mmann78@xxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #7286|                            |review_for_checkin?
               Flag|                            |

--- Comment #3 from Michael Mann <mmann78@xxxxxxxxxxxx> 2011-10-21 06:11:44 PDT ---
Created an attachment (id=7286)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=7286)
New IMAP filters

Added filters to the IMAP protocol in line with how Wireshark was parsing them
(a basic proto_tree_add_tree to proto_tree_add_item conversion).  I'm not
familiar with the protocol (and the IMAP protocol doesn't appear to have an
official spec), so any comments on the fields chosen is welcome.  Note that I
"repurposed" imap.request and imap.response.

imap.isrequest - TRUE if request, FALSE if response
imap.line - A single line (as determined by \r\n) of an IMAP message
imap.request_tag - The first token of a IMAP request message line
imap.request - The remainder of a (request) line after imap.request_tag
imap.response_tag - The first token of a IMAP response message line
imap.response - The remainder of a (response) line after imap.response_tag


Fuzztested with the previously attached trace.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.