ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] Help understanding Epan's dissectors

Date: Sun, 29 Oct 2006 22:30:11 -0500
Hello,

I've been studying Wireshark's source code for a while, but there's something I still don't understand. It's specifically about the inner workings of Epan. How does one dissectors knows and decides which subdissector is the correct one?

Such as, how does "frame" know which "wtap_encap" is the correct one? Are there any probe functions around that I am missing?

Thanks,
Ramiro Polla