smb2-dissector: learn the "REPLAY_OPERATION" flag
[obnox/wireshark/wip.git] / plugins / mate / examples / pasv_ftp.mate
1 # pasv_ftp.mate
2 # $Id$
3 Action=PduDef; Name=ftp_pdu; Proto=ftp; Transport=tcp/ip; Stop=TRUE; ftp_addr=ip.addr; ftp_port=tcp.port; ftp_resp=ftp.response.code; ftp_req=ftp.request.command; server_addr=ftp.passive.ip; server_port=ftp.passive.port;
4
5 Action=PduDef; Name=ftp_data_pdu; Proto=ftp-data; Transport=tcp/ip; server_addr=ip.src; server_port=tcp.srcport; 
6
7 Action=GopDef; Name=ftp_data; On=ftp_data_pdu; server_addr; server_port;
8 Action=GopStart; For=ftp_data; server_addr;
9
10 Action=GopDef; Name=ftp_ctl; On=ftp_pdu; ftp_addr; ftp_addr; ftp_port; ftp_port;
11 Action=GopStart; For=ftp_ctl; ftp_resp=220;
12 Action=GopStop; For=ftp_ctl; ftp_resp=221;
13 Action=GopExtra; For=ftp_ctl; server_addr; server_port;
14
15 Action=GogDef; Name=ftp_ses;
16 Action=GogKey; For=ftp_ses; On=ftp_ctl; ftp_addr; ftp_addr; ftp_port; ftp_port;
17 Action=GogKey; For=ftp_ses; On=ftp_data; server_addr; server_port;
18