Wireshark mailing list archives

Re: ask about dissector_add ( ) function to instruct wireshark to pass packet to my dissector


From: Guy Harris <guy () alum mit edu>
Date: Tue, 21 Jun 2011 17:56:37 -0700


On Jun 21, 2011, at 4:18 PM, Changqin Xia wrote:

I am a newbie on dissector development. I have a question about the "dissector_add( )" function.

I went through a few examples, most of them are using "tcp.port" or "udp.port" or something like that.

My dissector not uses any port number to instruct wireshark to pass packets to my dissector, my dissector is using 
"Magic" (the first byte).

What protocol does your dissector's protocol run on top of?  TCP, UDP, or something else?

And when you say "my dissector is using "Magic" (the first byte)", do you mean it's looking for a special magic value 
in the first byte of its packet data?
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: