Hi
can any one please tell me the procedure to add a new
protocol analyzer.
Thanks
The best way to see how an analyzer works is to take a look at one
of the more simple existing analyzers. For a TCP protocol, the
finger analyzer is a good starting point (it's in Finger.{h,cc}; you
can ignore anything related to trace rewriting). For UDP the NTP
analyzer makes a good example.
Note that in the near future the analyzer interface will change, as
we're working on a more general analyzer architecture (which is,
e.g., able to analyze protocols independent of their well-know
ports). It will be easy to convert analyzers to the new interface
though.
Which protocol do you want to add?
Robin