jNetPcap briefly introduced an experimental feature which analyzes (in great detail) various protocols and provides Ip4 and tcp-reassembly services. The feature was deprecated fairly quickly due to some limitations of the existing jNetPcap implementation. Especially at the native level and how information is stored about decoded packet states. The existing memory management of jNetPcap turned out to be inadequate for the task and greatly complicated implementation of this feature.
This is however #1 feature requested and sought after by most users. It is currently being completely rewritten for the next generation of the jNetPcap API in the coming
2.x 1.5 releases. The expected time frame for first release of this feature is in October June of 2011. It will be decoupled from overall jnetpcap dependency and released as a separate module. Of course this module will work in conjunction with jnetpcap, the libpcap java wrapper module.
Analysis, protocol decoding/dissecting and packet scanning will not be separate features anymore. A protocol definition will contain all 3 components listed above as a single and comprehensive protocol definition. Users will be able to work with protocols at whatever level is needed, such as individual message fragments (per packet), reassembled messages or streams, and full analysis such as error or questionable conditions.
The deprecated analysis feature is still available for experimentation purposes both in binary (upto ver 1.3.b0003) and source form. However we can not currently provide support for that feature. There are several known bugs that we do not plan on fixing and we would advise everyone not to use this feature in any production code, until it is properly released in Q3 of 2011 with full support.