ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] Recursive dissection

From: "Matt Poduska" <mpoduska.intermec@xxxxxxxxx>
Date: Wed, 18 Jun 2008 14:16:16 -0500
Hello,

In order to accept into the Wireshark codebase, it was suggested that I recode a dissector plugin I created and submitted a few months ago. I'm curious if there are any suggestions on the best way to use tvb_* functions for dissecting a recursively-defined protocol.

LLRP (the protocol I'm trying to dissect) defines it's messages as a collection of "parameters" and "fields", where parameters can contain other parameters and fields. My current implementation includes buffer "wrapper" functions to deal with maintaining the current location within the tvb as the message (parameters and fields) are parsed. Is there "native" tvb_* functions that do this type of thing already?

Thanks, Matt Poduska

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1957