Developers

naming protocols using PRTO

A place for developers to exchange information about extending OmniPeek, and ask technical questions about plugins on MyPeek, scripting, and programming.
LinkLooker
Posts: 3
Joined: Sun Mar 08, 2009 3:00 pm

naming protocols using PRTO

Postby LinkLooker » Sun Mar 08, 2009 3:11 pm

Hi,
I'm trying to create a new decoder and would like to provide a meaningful name that would be displayed under the "Protocol" field, rather than just displaying the ethernet protocol number.
If I enter the protocol number into the "Name Table" OmniPeek would successfully recognize the protocol, however I would like to provide more information such as the type of the frame.
So I would like something like "Protocol - Msg Type" to be displayed.
I have no idea how to do it using the PRTO instruction.
please advise.

I have also noticed that some strings end with a "\" and then there's another string.
For example - RSN Information\RSN:
I wonder what is the meaning of this syntax.

thank you,
LL

Spacepacket
Posts: 78
Joined: Thu May 22, 2008 9:36 am

RE: naming protocols using PRTO

Postby Spacepacket » Tue Mar 10, 2009 9:50 pm

Hi LinkLooker,

To have your protocol name displayed in the protocol field of the decoder view, and the protocol column of the packet list, you will need to extend the pspecs.xml. This file is in c:\program files\wildpackets\omnipeek\1033\pspecs.xml. The reference document for protospecs is at https://mypeek.wildpackets.com/document ... /index.php

The "\" in the string parameter is used to specify a short name. The short name is used when you collapse a layer, and in the decoder column of the packet list. If you do not know what the decoder column is, then wow, you are missing out! ;-)

Thanks for the questions, and keep'em comin'.

-SpacePacket

LinkLooker
Posts: 3
Joined: Sun Mar 08, 2009 3:00 pm

RE: RE: naming protocols using PRTO

Postby LinkLooker » Thu Apr 23, 2009 12:58 pm

The decoder column is definitely a great feature. I wonder is it possible to "lock" decoder column on a specific field (it's very easy to accidentally click on another field and discard the original field you wanted to follow).

Another question, is it possible to add several "decoder columns" or several custom columns for your protocol?
where can I find more information about this feature (I have already read the blog post).

thanks,
LL

LinkLooker
Posts: 3
Joined: Sun Mar 08, 2009 3:00 pm

RE: RE: RE: naming protocols using PRTO

Postby LinkLooker » Tue Apr 28, 2009 2:25 am

and another question regarding the decoder column -
when I collapse a custom layer, and select it, the decoder column will only display the first field of that layer. is it possible to have it display all the fields like it does with predefined layers?

thanks

jimm1909
Posts: 2
Joined: Wed Jul 01, 2009 12:20 pm

Re: RE: RE: RE: naming protocols using PRTO

Postby jimm1909 » Wed Jul 01, 2009 12:23 pm

[quote="LinkLooker"]and another question regarding the decoder column -
when I collapse a custom layer, and select it, the decoder column will only display the first field of that layer. is it possible to have it display all the fields like it does with predefined layers?

thanks[/quote]

I've been wondering this for a while too. anybody know the answer?

thanks in advance,

jim
Last edited by jimm1909 on Tue Feb 24, 2015 8:50 pm, edited 1 time in total.

Spacepacket
Posts: 78
Joined: Thu May 22, 2008 9:36 am

RE: Re: RE: RE: RE: naming protocols using PRTO

Postby Spacepacket » Tue May 18, 2010 8:48 am

When you select a layer in the decode view, the collapsed version of that layer will be displayed in the decode column. The fields of the layer that are displayed are the ones which the author of the decode provided a short label for for.

The caveat is that the short label is a fairly new decoder language feature which was invented after most of the decodes were written. If there are layers that do not display the way you like, let us know so we can make the, look better in the next release.

Of course, you can also change the decodes yourself, and send them back to us.

-Spacepacket


Return to “Developers”

Who is online

Users browsing this forum: No registered users and 15 guests