Re: "Wireshark-dev: Re: using pinfo structure to save data after first iteration"

[Pascal Quantin <pascal.quantin () gmail com>]

Hi Koundinya,

2015-06-30 11:28 GMT+02:00 koundinya poluri <koundi.poluri () gmail com>:

> Hi, Anders,
>
> I had a similar idea on how it should be done.I wanted to save some srtp
> related data once you processs the packets first time like creating a
> context which carries the ssrc and keys so that it can relate the packets
> to keys using the ssrc.But unfortunately wireshark cant differentiate
> between a rtp packet and srtp packet so it just processes the srtp packet
> as an rtp packet and changes the visited flag to one.
>
> So cant use that flag which is generally used to differentiate the first
> iteration from the next ones.So i tried to put my own flag in the pinfo
> structure and modify it,but that did not work, as it looks like pinfo
> structure is a READ ONLY structure from a dissector's point of view.So how
> do I differentiate between iterations??
>
> Is my understanding correct ?If so what is the solution to my
> problem?Thanks!
>
> Also I am using UAT for entering keys!
>
> -koundinya
Did you try using the p_add_proto_data/p_get_proto_data API to store you
data, as explained in doc/README.dissector file chapter 2.5?

Regards,
Pascal.

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe