Hi,
To fix a bug, I need to pass the protocol type from a STARTTLS-like
protocol to the SSL dissector. I was about to use the unused data
field of dissect_ssl for this, but it turns out that the TCP dissector
fills in this field. That makes it entirely useless for other purposes
(such as passing
It's the preferred way to exchange data between dissectors because you're a lot
more sure of its scope than some of the other methods. For most cases, you're
just passing the data between a dissector and it's subdissector (rarely does it
go farther than that).
If TCP is passing its data to
