I have a similar need. What I need to see is the original HTTP request URL. In our system, the payload of the HTTP response will contain different message types based on the requested type. Is there a way to get that info from the subdissector?
Regards, Chih Wang -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Guy Harris Sent: Monday, July 28, 2008 10:37 AM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] Peek at HTTP Headers as Subdissector On Jul 28, 2008, at 5:59 AM, DeRosa, Anthony wrote: > I'm writing an HTTP subdissector. Given that the tvbuff_t passed to > an > HTTP subdissector is a subset of the tvbuff_t that contains the HTTP > headers, is there any way to peek at the HTTP headers? In other > words, > is there a way to peek at the parent tvbuff_t, when all you have is a > subset? No, there isn't. What information do you need from the HTTP headers? _______________________________________________ Wireshark-dev mailing list [email protected] https://wireshark.org/mailman/listinfo/wireshark-dev CONFIDENTIALITY NOTICE: The information contained in this message may be privileged and/or confidential. If you are not the intended recipient, or responsible for delivering this message to the intended recipient, any review, forwarding, dissemination, distribution or copying of this communication or any attachment(s) is strictly prohibited. If you have received this message in error, please notify the sender immediately, and delete it and all attachments from your computer and network. _______________________________________________ Wireshark-dev mailing list [email protected] https://wireshark.org/mailman/listinfo/wireshark-dev
