From owner-freebsd-hackers@FreeBSD.ORG Fri Mar 4 19:41:34 2005 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BDA9E16A4CE; Fri, 4 Mar 2005 19:41:34 +0000 (GMT) Received: from mail.vicor-nb.com (bigwoop.vicor-nb.com [208.206.78.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9B26943D2D; Fri, 4 Mar 2005 19:41:34 +0000 (GMT) (envelope-from julian@elischer.org) Received: from [208.206.78.97] (julian.vicor-nb.com [208.206.78.97]) by mail.vicor-nb.com (Postfix) with ESMTP id 3A5E37A41E; Fri, 4 Mar 2005 11:41:34 -0800 (PST) Message-ID: <4228B9ED.9040906@elischer.org> Date: Fri, 04 Mar 2005 11:41:33 -0800 From: Julian Elischer User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.5) Gecko/20050218 X-Accept-Language: en, hu MIME-Version: 1.0 To: Aziz KEZZOU References: <37e13166050304080715525d7e@mail.gmail.com> In-Reply-To: <37e13166050304080715525d7e@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-net@freebsd.org cc: hackers@freebsd.org Subject: Re: generic network protocols parser ? X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Mar 2005 19:41:34 -0000 Aziz KEZZOU wrote: >Hi all, >I am wondering if any one knows about a generic parser which takes a >packet (mbuf) of a certain protocol (e.g RSVP ) as input and generates >some data structre representing the packet ? > > you might look at DPF (a packet filter/classifier).. it has an interesting filter description language. >I've been searching for a while and found that ethereal and tcpdump >for example use specific data structres and functions to dissect each >protocol packets. Is this the only approach possible ? > >My supervisor suggested using a TLV (Type/Length/Value) approach >instead. Any opinions about that? > >If no such a parser exists is there any practical reason why ? > >Thanks, >Aziz >_______________________________________________ >freebsd-net@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-net >To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > >