Wireshark-dev: Re: [Wireshark-dev] SMTP: Extracting parametrs
From: Stephen Fisher <[email protected]>
Date: Wed, 18 Jun 2008 17:52:29 -0600
On Tue, Jun 10, 2008 at 10:54:43AM -0700, goitom kahsay wrote:

>  Thank you very much for you help.
> Yes, I  created gtk/export_object_smtp.c ,gtk/export_object2.c,
> export_object2.h and  packet-smtp.h similar to gtk/export_object_http.c
> ,gtk/export_object.c,export_object.h and packet-http.h.  and it dissplays
> some thing unreadable characters.
> But i doubt about retrieving the parameters from the 
> packet-smtp.c(dissect_smtp_data) fuction which is used to display the 
> data line by line to the protocol tree. Do u think it is possible to 
> retrieve these value from that function using tap mechanism?

Could you send me the code you have already and I'll take a look at it.  
You can extract the parameters you want via a tap perhaps from the SMTP 
dissector or the IMF disector as Abhik has suggested.