Wireshark mailing list archives
Tap Implementation
From: Shawn Mayer <mayer_sr () wvwc edu>
Date: Tue, 06 Apr 2010 23:30:20 -0400
Hello everyone, I'm currently working on implementing a tap interface for the aim_messaging dissector and have some questions. Do you think I'd be better off tapping the main aim protocol? Right now I have it tapping packets to the queue twice, at the end of dissect_aim_msg_outgoing and dissect_aim_msg_incoming, in packet-aim_messaging.c. Is this the right way to go about this? Is "tap_queue_packet(aim_messaging_tap, pinfo, NULL);" the correct syntax? What is contained in pinfo? Should I make a struct of the data I want sent to the tap and replace the NULL with that? I've been following the README.tapping file and the tap-rcpstat.c and am mildly confused. Thanks for all your assistance. Shawn NTMail K12 - the Mail Server for Education ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Tap Implementation Shawn Mayer (Apr 06)
- Re: Tap Implementation Jaap Keuter (Apr 06)
- Re: Tap Implementation Shawn Mayer (Apr 07)
- Re: Tap Implementation Jaap Keuter (Apr 06)