Re: [Wireshark-dev] dissector-plugins

On 10/14/2010 04:12 PM, Lange Jan-Erik wrote:
> Hello,
> there is the posibility in wireshark to create a "dissector-plugin".
> I want to dissect a packet which is not even conform to the ethernet
> protocol.
> Is it possible to create such a dissector plugin in this "low level"?
> Best regards
> Jan
>

Hi,

Who said Wireshark is for Ethernet? Have a look at wiretap/wtap.h and see how
many link layer types are already supported. And yes, each has a dissector to
start with, from epan/dissectors/packet-frame.c and up.

Thanks,
Jaap
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@wireshark.org?subject=unsubscribe

• This message: [ Message body ]
• Next message: Al: "Re: [Wireshark-dev] Need help with decrypting wireshark data...."
• Previous message: Guy Harris: "Re: [Wireshark-dev] How to add a wtap encapsulation?"
• In reply to: Lange Jan-Erik: "[Wireshark-dev] dissector-plugins"

• Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]