Wireshark mailing list archives

"Wireshark-dev: Re: using pinfo structure to save data after first iteration"


From: koundinya poluri <koundi.poluri () gmail com>
Date: Tue, 30 Jun 2015 14:58:20 +0530

Hi, Anders,

I had a similar idea on how it should be done.I wanted to save some srtp
related data once you processs the packets first time like creating a
context which carries the ssrc and keys so that it can relate the packets
to keys using the ssrc.But unfortunately wireshark cant differentiate
between a rtp packet and srtp packet so it just processes the srtp packet
as an rtp packet and changes the visited flag to one.

So cant use that flag which is generally used to differentiate the first
iteration from the next ones.So i tried to put my own flag in the pinfo
structure and modify it,but that did not work, as it looks like pinfo
structure is a READ ONLY structure from a dissector's point of view.So how
do I differentiate between iterations??

Is my understanding correct ?If so what is the solution to my
problem?Thanks!

Also I am using UAT for entering keys!

-koundinya
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: