Re: why cannot I use heur_dissector_add("ip", .....

[Guy Harris <guy () alum mit edu>]

On Jun 26, 2011, at 2:09 PM, John x wrote:

> these packets run directly atop IP, any suggestions?

        1) Get a protocol number from the IANA and use it, instead of some hack based on the TTL value.

        2) Hack the IP dissector in a private version of Wireshark.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe