Wireshark · Ethereal-dev: Re: [ethereal-dev] New dissector question

[Guy Harris <guy@xxxxxxxxxx>]

> For
> changes that I make to support protocol evolution, I could post the
> updated versions to my ftp site and inform someone of their availability.  
> (Would patches be preferred?)

Yes.

>   The protocol was designed with alignment problems in mind.  As long as
> the packet is aligned on a 32 bit boundary, everything should be
> fine.  (AFAIK the TCP/IP header is a factor of 4 bytes long.)

Yes, but there may be headers preceding the TCP/IP header - the Ethernet
header is 14 bytes long, and the FDDI header is a marvelously
pessimistic 13 bytes long.