Wireshark mailing list archives
Re: Duplicate dissectors (anonymous) and (anonymous) for protocol xxx
From: Guy Harris <guy () alum mit edu>
Date: Wed, 25 Oct 2017 14:29:14 -0700
On Oct 25, 2017, at 1:44 PM, John Dill <John.Dill () greenfieldeng com> wrote:
I just happened to turn on console printing to troubleshoot a different problem and I'm getting a couple of interesting messages when I change my protocol preferences. Duplicate dissectors (anonymous) and (anonymous) for protocol xxx in dissector table tcp.port
...
I have a proto_reg_handoff_xxx that creates a couple of TCP port dissector handles using 'dissector_add_uint("tcp.port", MY_TCP_PORT, tcp_handle)',
Why *two* handles? You can register the handle tcp_handle twice with two different TCP ports. If the format of the packets is the same for both ports, you *should* use the same dissector handle; if *that* causes an error, that's a bug. If the format of the packets is *not* the same for both ports, then you should use different dissector handles - with different dissector functions - *and* ensure that the dissectors have different names (which means they have to *have* names, so use "register_dissector()" rather than "create_dissector_handle()" to create the handles), so that, as Michael Mann noted, the user can choose one or the other of them for "Decode As...". ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Duplicate dissectors (anonymous) and (anonymous) for protocol xxx John Dill (Oct 25)
- Re: Duplicate dissectors (anonymous) and (anonymous) for protocol xxx Michael Mann via Wireshark-dev (Oct 25)
- Re: Duplicate dissectors (anonymous) and (anonymous) for protocol xxx Guy Harris (Oct 25)