Re: Still, I can't find the location where the captured data saved

[刘昆 <liukunmeister () gmail com>]

于 2010年10月18日 18:33, yami 写道:
> How to find the cf_read() function is a quiz to you, if you do not
> know how to do that.
>
> On Mon, Oct 18, 2010 at 2:58 PM, 刘昆 <liukunmeister () gmail com
> <mailto:liukunmeister () gmail com>> wrote:
>
>     于 2010年10月18日 12:43, yami 写道:
> >     packet-http.c is the code for the HTTP dissector only. How
> >     captured traffic is saved is a common facility for all protocols.
> >     You may take a look at cf_read() function, which reads captured
> >     data from a file. It may different from live capture, but I think
> >     it is a good start for you.
> >
> >     On Tue, Oct 12, 2010 at 7:24 PM, 刘昆 <liukunmeister () gmail com
> >     <mailto:liukunmeister () gmail com>> wrote:
> >
> >         Still, I can't find the location where the captured data
> >         saved.For
> >         example,now I want find which variable save the data captured
> >         in the
> >         http protocol.My meaning is the data list at the bottom in the
> >         wireshark.I have searched for the data in the packet-http.c
> >         but still
> >         confused.Who can tell me which variable at which function
> >         save the data
> >         captured in the http protocol from the network.
> >
> >         And I want to say the header is not really important to
> >         me,What I want
> >         to find is the data captured inside the packets.
> >         ___________________________________________________________________________
> >         Sent via: Wireshark-dev mailing list
> >         <wireshark-dev () wireshark org
> >         <mailto:wireshark-dev () wireshark org>>
> >         Archives: http://www.wireshark.org/lists/wireshark-dev
> >         Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
> >         mailto:wireshark-dev-request () wireshark org
> >         <mailto:wireshark-dev-request () wireshark org>?subject=unsubscribe
> >
> >
> >
> >     ___________________________________________________________________________
> >     Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org> <mailto:wireshark-dev () wireshark org>
> >     Archives:    http://www.wireshark.org/lists/wireshark-dev
> >     Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
> >                  mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
>     Thank you .However where is the cf_read() fuction.Can you tell me
>     the path of the file which include the cf_read() function?
>
>     ___________________________________________________________________________
>     Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org
>     <mailto:wireshark-dev () wireshark org>>
>     Archives: http://www.wireshark.org/lists/wireshark-dev
>     Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>     mailto:wireshark-dev-request () wireshark org
>     <mailto:wireshark-dev-request () wireshark org>?subject=unsubscribe
>
>
>
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>              mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
I have find the cf_read function in file.c .Thank you very much.

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe