Wireshark-dev: Re: [Wireshark-dev] [PATCH] Dissector hooks: Small and Simple additions

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 1 Mar 2007 19:46:51 -0800

On Mar 1, 2007, at 4:57 PM, Shehjar Tikoo wrote:

One drawback of a per-field hook could be that hooks which need a global

view or state of the full message might not get access to the needed
fields.

Couldn't the private data passed to the hook be used to store the kind of state needed for that?

Also, can this be done with the existing tap mechanism, by searching for particular fields in the generated protocol tree?