Wireshark-dev: Re: [Wireshark-dev] dissection of packets with unknown format (LDP/MPLS/PWE)
From: Alexandre Abreu <[email protected]>
Date: Mon, 28 Apr 2008 22:39:24 +0100

I'll have a look at those and hopefully that will give me the clues I need.

On Apr 28, 2008, at 4:14 PM, Richard van der Hoff wrote:

Alexandre Abreu wrote:

Has anyone ever found a case where the successful dissection of one
protocol depends on what was negotiated in another protocol?
Yes, this is done for RTP traffic, which is set up via H.245 or SIP/ 
I guess my question comes down to: how can we store the information
from dissection of one protocol so that it can be used to dissect
another protocol, while still following wireshark's dev guidelines.
Have a look at rtp_add_address (in packet-rtp.c), which is called from
packet-sdp.c and packet-h245.c.


Wireshark-dev mailing list