----- Original Message ----- From: "Guy Harris" To: "Anders Broman (TN/EAB)" Sent: Friday, January 23, 2004 8:23 PM Subject: Re: [Ethereal-dev] Use of tcp_dissect_pdu and tvb_format_text
> On Fri, Jan 23, 2004 at 10:21:22AM +0100, Anders Broman (TN/EAB) wrote: > > Is there any reason why the preference to let sub dissectors do TCP > > reasembly shouldn't be default on ? > > It'd be OK with me. > > Ronnie? What do you think? It would be ok with me as well. Actually this is one item i have been thinking of for a reasonably long time (months) but been too busy with other stuff to do anything about. I think it would make a lot of sense if someone did a patch to change TCP offser reassembly : to default to on and change all subdissector requesting tcp reassembly to off. I am all for it. Im am not completely dead eventhouh ive been busy and distracted so much it is not funny. I am now working on a packet-ber.c helper (dissect BER constructs, tabledriven and similar to packet-per.c) to be used to dissect asn1/ber encoded data using ethereal native code so that we can easily operate and act on the data in ber encoded packets. the ber thing is probably ~40% complete as far as x.690 goes and 80% complete as far as the requirements of kerberos and ldap goes. I have also converted ~30% of packet-kerberos.c into this new api/helpers. Why? using the external library to decode the data makes it "difficult" to operate on and act on the content of the fields. using native code will make it easier and make it relatively easy to do things I would really like to have myself such as 1, copy kerberos keytab file to the private, nonnetworked machine where ethereal lives. 2, use ethereal + keytab to open also encrypted portions of kerberos blobs and extract session keys. 3, use session keys to verify hash and decrypt signed/encrypted pdus. i also belive this functionality added to kerberos and thus cifs authentication/privacy would make it much easier for those poor sods that have to reverse engineers the dcerpc interfaces of cifs. a work if it can be made easier will benefit all. i also have hope that people i have helped recently with dcerpc interfaces will find the time is right to contribute the code to ethereal. _______________________________________________ Ethereal-dev mailing list [EMAIL PROTECTED] http://www.ethereal.com/mailman/listinfo/ethereal-dev
