wireshark-dev October 2010 archive
Main Archive Page > Month Archives  > wireshark-dev archives
wireshark-dev: Re: [Wireshark-dev] dissector-plugins

Re: [Wireshark-dev] dissector-plugins

From: Jaap Keuter <jaap.keuter_at_nospam>
Date: Thu Oct 14 2010 - 18:38:07 GMT
To: Developer support list for Wireshark <wireshark-dev@wireshark.org>

On 10/14/2010 04:12 PM, Lange Jan-Erik wrote:
> Hello,
> there is the posibility in wireshark to create a "dissector-plugin".
> I want to dissect a packet which is not even conform to the ethernet
> protocol.
> Is it possible to create such a dissector plugin in this "low level"?
> Best regards
> Jan


Who said Wireshark is for Ethernet? Have a look at wiretap/wtap.h and see how
many link layer types are already supported. And yes, each has a dissector to
start with, from epan/dissectors/packet-frame.c and up.

Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev