Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 4 Mar 2005 11:21:49 -0500
From:      Bosko Milekic <bmilekic@technokratis.com>
To:        Aziz KEZZOU <opensource.enthousiat@gmail.com>
Cc:        hackers@freebsd.org
Subject:   Re: generic network protocols parser ?
Message-ID:  <20050304162149.GA90499@technokratis.com>
In-Reply-To: <37e13166050304080715525d7e@mail.gmail.com>
References:  <37e13166050304080715525d7e@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

On Fri, Mar 04, 2005 at 11:07:34AM -0500, Aziz KEZZOU wrote:
> Hi all,
> I am wondering if any one knows  about a generic parser which takes a
> packet (mbuf) of a certain protocol (e.g RSVP ) as input and generates
> some data structre representing the packet ?
> 
> I've been searching for a while and found that ethereal and tcpdump
> for example use specific data structres and functions to dissect each
> protocol packets. Is this the only approach possible ?
> 
> My supervisor suggested using a TLV (Type/Length/Value) approach
> instead. Any opinions about that?
> 
> If no such a parser exists is there any practical reason why ?
> 
> Thanks,
> Aziz

  You can only go so far with generic parsing.  Eventually you will want
  some protocol specific value to be extracted and your parser will have
  to know about what the packet looks like.

  What are you trying to do, exactly?

-- 
Bosko Milekic
bmilekic@technokratis.com
bmilekic@FreeBSD.org



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050304162149.GA90499>