ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] new tap for mgcp

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>
Date: Thu, 6 Mar 2003 20:19:57 +1100
Hi,

checked in.


two things are still missing:

update to doc/tethereal.pod.template   to describe the new feature

ResponseIn: field for responses.  As you noticed, ResponseIn: does not work
immediately,
however, the same thing is true for ResponseIn: for ONC-RPC, DCE-RPC, SMB
etc etc.
Just copy the way packet-rpc.c does it and it is better than nothing.
When loading ONC-RPC captures, ResponseIn: does not match/work until the
packet
is redissected, either by rescanning the capture file or by clicking on the
packet.
ResponseIn: does then unfortunately not work in display filters that are
active when reading a capture,
nor does it work for tethereal :-(
Please implement a patch that does ResponseIn: in a similar was as
packet-rpc.c does it.


The only way to get the ResponseIn: things to work properly for ethereal
would be an ability to reverse back and redissect previous packets when the
ResponseIn: data becomes available.
This would imo require ethereal to become fully stateful (which i would not
object to) but as a sideeffect
probably mean that the functionality to capture packets would have to be
removed.
Not going to happen, but in the future maybe there can be some hack
implemented to redissect earlier
packets.





> Hello all,
>
> I have attached all files and patches for a new mgcp tap including the
> patches for the plugin_api of ethereal.