aboutsummaryrefslogtreecommitdiffstats
path: root/doc/README.heuristic
AgeCommit message (Collapse)AuthorFilesLines
2015-01-27Lua: Expose tcp_dissect_pdus() to LuaHadriel Kaplan1-1/+1
Provide a way for Lua-based dissectors to invoke tcp_dissect_pdus() to make TCP-based dissection easier. Bug: 9851 Change-Id: I91630ebf1f1fc1964118b6750cc34238e18a8ad3 Reviewed-on: https://code.wireshark.org/review/6778 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com> Reviewed-by: Hadriel Kaplan <hadrielk@yahoo.com> Tested-by: Hadriel Kaplan <hadrielk@yahoo.com>
2015-01-09Some typos fixed.Dario Lombardo1-1/+1
Change-Id: I65df0c40d771c4854b73fd5c35d1af600f15f324 Reviewed-on: https://code.wireshark.org/review/6445 Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
2014-11-21README.heuristic: rework example code.Bill Meier1-26/+74
Specifically: show the use of tcp_dissect_pdus() for a TCP heuristic dissector Change-Id: I02f184b2c8ef6ed128ef3d0bc59eed759aae54bb Reviewed-on: https://code.wireshark.org/review/5399 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-09-13README.dissector was split from README.developer in 2013 - update someJoerg Mayer1-1/+1
documents referring to the split out sections. Remove trailing whitespace while at this. Change-Id: I36cfe0ac55e8f653bffbf850e01f582aacf85557 Reviewed-on: https://code.wireshark.org/review/4094 Reviewed-by: Jörg Mayer <jmayer@loplof.de>
2014-03-15Fix README.heuristic wording to Bill Meier's correctionHadriel Kaplan1-2/+4
Change-Id: Ifeb61abdcc7aa049529d584ff3fe50b6fd79fe21 Reviewed-on: https://code.wireshark.org/review/662 Reviewed-by: Anders Broman <a.broman58@gmail.com>
2014-03-14Add Lua heuristic dissector supportHadriel Kaplan1-4/+6
This adds the ability for Lua scripts to register heuristic dissectors for any protocol that has registered a heuristic dissector list, such as UDP, TCP, and ~50 others. The Lua function can also establish a conversation tied to its Proto dissector, to avoid having to check the heuristics for the same flow. The example dissector in the testsuite has also been enhanced to include a heuristic dissector, to verify the functionality and provide an example implementation. Change-Id: Ie232602779f43d3418fe8db09c61d5fc0b59597a Reviewed-on: https://code.wireshark.org/review/576 Reviewed-by: Anders Broman <a.broman58@gmail.com>
2014-03-13Note that a dissector heuristic test *must not* cause an exception before ↵Bill Meier1-0/+10
returning FALSE. Change-Id: I9f1ab000f7a2c554d1c20abf8ca4e4bab4b5ef27 Reviewed-on: https://code.wireshark.org/review/635 Reviewed-by: Bill Meier <wmeier@newsguy.com> Tested-by: Bill Meier <wmeier@newsguy.com>
2014-02-14Remove $Id$ and other Subversion leftovers from the doc files.Jeff Morriss1-5/+0
Change-Id: I28a376f7e0fd90971f65ae9c1105a3ec85221470 Reviewed-on: https://code.wireshark.org/review/204 Reviewed-by: Jeff Morriss <jeff.morriss.ws@gmail.com>
2013-02-11Fix two bugs in the example code that I revised.Bill Meier1-2/+2
svn path=/trunk/; revision=47626
2013-02-11Remove a _U_ which I should not have used.Bill Meier1-1/+1
svn path=/trunk/; revision=47625
2013-02-11Well, that didn't work (keyword substitution, that is). Try now.Chris Maynard1-3/+3
svn path=/trunk/; revision=47623
2013-02-11Fix a couple of typos. Set svn properties.Chris Maynard1-5/+5
svn path=/trunk/; revision=47622
2013-02-11Update: Primarily to suggest calling conversation_set_dissector()Bill Meier1-115/+90
once a packet has been identified as being part of a particular protocol. svn path=/trunk/; revision=47621
2010-12-20Rename the routines that handle dissector tables with unsigned integerGuy Harris1-1/+1
keys to have _uint in their names, to match the routines that handle dissector tables with string keys. (Using _port can confuse people into thinking they're intended solely for use with TCP/UDP/etc. ports when, in fact, they work better for things such as Ethernet types, where the binding of particular values to particular protocols are a lot stronger.) svn path=/trunk/; revision=35224
2008-09-09from Christopher.Maynard@GTECH.COM:Ulf Lamping1-28/+40
Attached is a small patch with minor formatting changes and a few XXX's filled in with some additional information. svn path=/trunk/; revision=26170
2008-09-06compile a document about heuristic dissectors, following:Ulf Lamping1-0/+200
http://www.wireshark.org/lists/wireshark-dev/200808/msg00234.html svn path=/trunk/; revision=26146