Wireshark-dev: Re: [Wireshark-dev] SMTP: Extracting parametrs

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Thu, 1 May 2008 00:49:02 -0600

On Thu, May 01, 2008 at 09:27:06AM +0300, goitom kahsay wrote:

> I want to display these values(the SMTP parameters such as 
> FROM,TO,SUBJECT,DATE) in a *new dialog* under the analyze menu. And 
> the dialog displays these values from each SMTP packets displayed in 
> the packet list pane.

If the contents of the e-mails are gathered also, the best place to 
display this information is probably via the Export Object feature (File 
- Export - Object menu).  The only object export implemented so far is 
HTTP.  See gtk/export_object.c, gtk/export_object_http.c and a small 
piece in epan/dissectors/packet-http.c for how this is implemented.  
Hint: It uses the tap mechanism to pass the information from the 
dissector to the export object dialog.


Steve