Documentation fix. Fix a strangely-worded sentence in README.xml-output

and add some important comments to msnchat.

svn path=/trunk/; revision=23897
This commit is contained in:
Gilbert Ramirez 2007-12-17 09:42:33 +00:00
parent 3d7d0393b2
commit e36ade488a
2 changed files with 5 additions and 2 deletions

View File

@ -177,8 +177,8 @@ Each of these classes has accessors which will return the defined attributes:
Protocols and fields can contain other fields. Thus, the Protocol and
Field class have a "children" member, which is a simple list of the
Field objects, if any, that are contained. The "children" list can be
directly accessed by calling users. It will be empty of this Protocol
or Field contains no Fields.
directly accessed by code using the object. The "children" list will be
empty if this Protocol or Field contains no Fields.
Furthermore, the Packet class is a sub-class of the PacketList class.
The PacketList class provides methods to look for protocols and fields.

View File

@ -227,6 +227,9 @@ class CaptureFile:
"""Collect the packets passed back from WiresharkXML.
Sort them by TCP/IP conversation, as there could be multiple
clients per machine."""
# Just in case we're looking at tunnelling protocols where
# more than one IP or TCP header exists, look at the last one,
# which would be the one inside the tunnel.
src_ip = packet.get_items("ip.src")[-1].get_show()
dst_ip = packet.get_items("ip.dst")[-1].get_show()
src_tcp = packet.get_items("tcp.srcport")[-1].get_show()