Attached is a patch making the following enhancements to COTP dissection:
1. Searchable fields for cotp.src-tsap, cotp.src-tsap-bytes, cotp.dst-tsap
and cotp.dst-tsap-bytes as previously submitted, but with options Auto and
Bytes only as suggested by Guy.
2. Fields cotp.type.XX where XX is the TPDU type: CR, CC, AK, DT etc. This
allows easy filtering and searching.
The patch sets the field type for the TPDU type fields to FT_NONE. I notice,
however, that if I right click an instance of the field in the protocol tree
and choose "Apply as filter->Selected" or similar, the display filter string
is set to frame[19:1] == d2 (or whatever) instead of cotp.type.cc (or
whatever). Is this a "feature" of the GUI, or a bug, or am I misusing the
FT_NONE field type?
This patch is a replacement for the previous patch submitted for source and
destination TSAP searching.
Matthew
Community Network Services Ltd..
204-207 Western Docks, Southampton, Hants. SO15 1DA
Switchboard : +44 (0)845 6589920 Fax : +44 (0)2380 799602
Help Desk : +44 (0)845 6589930
http://www.cnsonline.net/
Reg. no. 2084279 England
*************************************************************
All views or opinions expressed herein are solely
those of the author and do not necessarily represent those
of Community Network Services Ltd who do not accept
liability for any action taken in reliance on the contents
of this message (other than where the company has a legal
or regulatory obligation to do so) or for the consequences
of any computer viruses which may have been transmitted
by this E-Mail
The E-Mail and any files transmitted with it, are confidential
and intended solely for the use of the individual or entity to
whom they are addressed. If you have received this message
in error please notify the sender and delete the message
immediately or alternatively email postmaster@xxxxxxxxxxxxx
***************************************************************
Attachment:
packet-clnp.diff
Description: Binary data
