diff options
author | Guy Harris <guy@alum.mit.edu> | 2002-06-08 21:54:52 +0000 |
---|---|---|
committer | Guy Harris <guy@alum.mit.edu> | 2002-06-08 21:54:52 +0000 |
commit | 2be8f3e875aa6f9f32837904e0f6252bf86c0298 (patch) | |
tree | f913a56fe5ed2c9b52e7323513f1c3597cb2e1bf /packet-tcp.c | |
parent | 9920d2c2578b8ff6bca57cc72b4971a02c0605f0 (diff) | |
download | wireshark-2be8f3e875aa6f9f32837904e0f6252bf86c0298.tar.gz wireshark-2be8f3e875aa6f9f32837904e0f6252bf86c0298.tar.bz2 wireshark-2be8f3e875aa6f9f32837904e0f6252bf86c0298.zip |
When looking for dissectors for the source and destination port numbers
in TCP, UDP, and SCTP, try the lower port number first, and then the
higher port number; this means that, for packets where a dissector is
registered for *both* port numbers:
1) we pick the same dissector for traffic going in both directions;
2) we prefer the port number that's more likely to be the right
one (as that prefers well-known ports to reserved ports);
although there is, of course, no guarantee that any such strategy will
always pick the right port number.
Ignore port numbers of 0, as some dissectors use a port number of 0 to
disable the port, and as RFC 768 says that the source port in UDP
datagrams is optional and is 0 if not used.
svn path=/trunk/; revision=5656
Diffstat (limited to 'packet-tcp.c')
-rw-r--r-- | packet-tcp.c | 33 |
1 files changed, 29 insertions, 4 deletions
diff --git a/packet-tcp.c b/packet-tcp.c index c8a1db09ac..515075d9d1 100644 --- a/packet-tcp.c +++ b/packet-tcp.c @@ -1,7 +1,7 @@ /* packet-tcp.c * Routines for TCP packet disassembly * - * $Id: packet-tcp.c,v 1.143 2002/06/04 07:03:46 guy Exp $ + * $Id: packet-tcp.c,v 1.144 2002/06/08 21:54:52 guy Exp $ * * Ethereal - Network traffic analyzer * By Gerald Combs <gerald@ethereal.com> @@ -1023,6 +1023,7 @@ decode_tcp_ports(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, int src_port, int dst_port) { tvbuff_t *next_tvb; + int low_port, high_port; next_tvb = tvb_new_subset(tvb, offset, -1, -1); @@ -1033,9 +1034,33 @@ decode_tcp_ports(tvbuff_t *tvb, int offset, packet_info *pinfo, src_port, dst_port, next_tvb, pinfo, tree)) return; - /* do lookup with the subdissector table */ - if (dissector_try_port(subdissector_table, src_port, next_tvb, pinfo, tree) || - dissector_try_port(subdissector_table, dst_port, next_tvb, pinfo, tree)) + /* Do lookups with the subdissector table. + We try the port number with the lower value first, followed by the + port number with the higher value. This means that, for packets + where a dissector is registered for *both* port numbers: + + 1) we pick the same dissector for traffic going in both directions; + + 2) we prefer the port number that's more likely to be the right + one (as that prefers well-known ports to reserved ports); + + although there is, of course, no guarantee that any such strategy + will always pick the right port number. + + XXX - we ignore port numbers of 0, as some dissectors use a port + number of 0 to disable the port. */ + if (src_port > dst_port) { + low_port = dst_port; + high_port = src_port; + } else { + low_port = src_port; + high_port = dst_port; + } + if (low_port != 0 && + dissector_try_port(subdissector_table, low_port, next_tvb, pinfo, tree)) + return; + if (high_port != 0 && + dissector_try_port(subdissector_table, high_port, next_tvb, pinfo, tree)) return; /* do lookup with the heuristic subdissector table */ |