Re: [Wireshark-dev] Export higer level PDUs, "Unbundled PDUs" decrypted PDUs etc

2013-04-18 Thread Anders Broman
vineeth vijay skrev 2013-04-18 18:34: Yes, and this "function" would take arguments of original frame, offset where the interesting payload starts and length of this payload. Correct?? Regards, Vineeth Or the tvb used by the dissector e.g the reassembled one + a buffer with meta data TLV:s p

Re: [Wireshark-dev] Export higer level PDUs, "Unbundled PDUs" decrypted PDUs etc

2013-04-18 Thread vineeth vijay
Yes, and this "function" would take arguments of original frame, offset where the interesting payload starts and length of this payload. Correct?? Regards, Vineeth On Thu, Apr 18, 2013 at 9:52 PM, Anders Broman wrote: > vineeth vijay skrev 2013-04-18 18:11: > > Hi Anders, > > Do you mean abi

Re: [Wireshark-dev] Export higer level PDUs, "Unbundled PDUs" decrypted PDUs etc

2013-04-18 Thread Anders Broman
vineeth vijay skrev 2013-04-18 18:11: Hi Anders, Do you mean ability to export only the payload protocol from tunneled/encapsulated captures like GTP-U etc? If yes, +1 :) Yes that could be one use case. Probably every protocol using the function would have to have code supporting it. Regard

Re: [Wireshark-dev] Export higer level PDUs, "Unbundled PDUs" decrypted PDUs etc

2013-04-18 Thread vineeth vijay
Hi Anders, Do you mean ability to export only the payload protocol from tunneled/encapsulated captures like GTP-U etc? If yes, +1 :) Have been looking for such functionality for some time. Regards, Vineeth On Thu, Apr 18, 2013 at 2:23 PM, Anders Broman wrote: > Hi, > > I think these topi

[Wireshark-dev] Export higer level PDUs, "Unbundled PDUs" decrypted PDUs etc

2013-04-18 Thread Anders Broman
Hi, I think these topics in various forms has been cropping up lately, would it be possible/useful to have a generic feature to "Export" to a new file >From a dissector using a tap writing a to a generic DLT with a pseudo header >containing pseudo data such as extracts from lover layers like IP