Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] About when do Tap listeners get called (and report a typo in

From: yami <yamisoe@xxxxxxxxx>
Date: Fri, 6 Feb 2009 13:56:39 +0800


On Thu, Feb 5, 2009 at 11:37 PM, Jeff Morriss <jeff.morriss.ws@gmail.com> wrote:


yami wrote:
> Hi dev,
>
> In doc/READE.tapping, section 'WHEN DO TAP LISTENERS GET CALLED' says:
>
>   Tap listeners are only called when Wireshark reads a new capture for
>    the first time or whenever Wireshark needs to rescan/redissect
>    the capture.
>
> Could anyone tell me the code place to ensure this? I could not find the
> related code.

Well, I don't think it's a case of ensuring that but rather a question
of when Wireshark needs to redissect a packet: whenever Wireshark needs
to (re)dissect a packet then it will call the dissectors again which
will in turn send the packet to the taps.

From code in file.c:add_packet_to_packet_list(), it seems to me that a packet is ALWAYS dissected by this function. Is that right? If it is the case, then README.tapping probably is not right.

Am I missing anything here?
 

> BTW,  in section 'TAP LISTENER' 2nd sentence, 'sInterfacing' should be
> 'Interfacing'.

Fixed, thanks.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe