On Wed, May 16, 2007 at 04:02:03PM +0200, Tomasz Noi?ski wrote: > Where should I store information I get during conversation analysis? I > have this info only on the first run (!pinfo->fd->flags.visited) and I > need it again later, when I display the packet trees. > Is p_add_proto_data()/p_get_proto_data() the only way? (It's quite > cumbersome, I think, as one frame can contain many protocol packets).
Yes, that is the best way to store data on a per-packet basis for later use. It's stored on a per-dissector/protocol basis, so IP can have its own and TCP can have its own, etc. Or do you mean that you have multiple PDUs of the same protocol in each packet? Steve _______________________________________________ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev
