Wireshark mailing list archives

Re: [work in progress / stuck] improved dissection for VNC (correct hextile encoding, correct desegmentation)


From: Anders Broman <a.broman () telia com>
Date: Thu, 16 Dec 2010 00:59:05 +0100

Kaul skrev 2010-12-15 21:05:


On Wed, Dec 15, 2010 at 4:29 PM, Jeff Morriss <jeff.morriss.ws <http://jeff.morriss.ws>@gmail.com <http://gmail.com>> wrote:

    Kaul wrote:
    > 3. Corrected hextile encoding parsing. It's quite wrong the way it's
    > done today (see 2nd rectangle in packet 23 of the attached sample
    > capture). It completely ignored the fact that the hextile
    encoding is
    > actually encoding a series of 16 by 16 pixel tiles (hence hexTILE, I
    > reckon). This presents another problem which I don't know how to
    solve -
    > I'm getting too many (legitimate!) items in my tree - and wireshark
    > thinks I'm in an infinite loop. The fact it, each update may have
    > several rectangles, each may have subrectables, each may have
    tiles...
    > it's endless if the screen is big enough.

    Hmmm, are the items really of that much interest to a user?  I mean,
    would someone really want to look at all 150,000 tiles (or whatever)
    one-by-one?  I would guess not, in which case it would probably make
    sense to just have an item that says "150,000 tiles."


Well, it is interesting if you have few of them, to see how the protocol really works. I guess I should stop adding them at some point... first 100 or so? if it's smaller than a packet size? Nevertheless, one might want to find oddities in the protocol implementation, and then he will need all of the data.
Y.
As an example, in the sigcomp dissector you can chose the level of detail...
Regards
Anders

    ___________________________________________________________________________
    Sent via:    Wireshark-dev mailing list
    <wireshark-dev () wireshark org <mailto:wireshark-dev () wireshark org>>
    Archives: http://www.wireshark.org/lists/wireshark-dev
    Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
                mailto:wireshark-dev-request () wireshark org
    <mailto:wireshark-dev-request () wireshark org>?subject=unsubscribe



___________________________________________________________________________
Sent via:    Wireshark-dev mailing list<wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
              mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: