TCP options are decoded in packet-tcp.c as a part of TCP dissection. To decode your own TCP options you'll need to extend the TCP dissector. You might look at MSS decoding as a simple example. Search for dissect_tcpopt_maxseg in packet-tcp.c.
-kary On Tue, Nov 10, 2009 at 3:27 AM, Sacheen Kamath <[email protected]> wrote: > Hi, > > I have a question regarding tcp options in a dissector. I have a > dissector which dissects some specific protocols. I also need to > decode http and other common protocols, but only the TCP options part > of of these messages because i need to display some specific options, > everything else in the common protocols should be displayed a usual. I > tried doing a "decode as" for these common protocols and choosing my > dissector, but my dissect function does not seem to be called. > > I was wondering if there is some way to do this. > 1. to decode the options part of common protocols or say dissect all > packets and look at their options part. > 2. once i decode the options part, get wireshark to do the rest of > decoding as usual. > > i really appreciate any help. > > regards, > sk > ___________________________________________________________________________ > Sent via: Wireshark-dev mailing list <[email protected]> > Archives: http://www.wireshark.org/lists/wireshark-dev > Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev > mailto:[email protected]?subject=unsubscribe > -- Kary Rogers
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <[email protected]> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe
