Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: [Wireshark-dev] Overriding existing RPC-TCP heuristic dissector with another heuristic one

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Shehjar Tikoo <shehjart@xxxxxxxxxxxxxxx>
Date: Thu, 01 Feb 2007 15:13:22 +1100

Hi all

I am writing a RPC over TCP heuristic dissector but the RPC dissector(in
packet-rpc.c) also registers a heuristic RPC over TCP dissector.

It is possible that the packet my heuristic dissector needs,
gets routed to the existing dissector.

From the list archives I see discussions about overriding regular dissectors with heuristic dissectors( using tcp.try_heuristic_first) but how can I override an existing heuristic dissector with another one.

Thanks
Shehjar

  • Follow-Ups:
    • Re: [Wireshark-dev] Overriding existing RPC-TCP heuristic dissector with another heuristic one
      • From: Jaap Keuter
    • Re: [Wireshark-dev] Overriding existing RPC-TCP heuristic dissector with another heuristic one
      • From: Guy Harris
  • Prev by Date: Re: [Wireshark-dev] Multiple pdus atop TCP -- a lie in README.developer?
  • Next by Date: Re: [Wireshark-dev] Overriding existing RPC-TCP heuristic dissector with another heuristic one
  • Previous by thread: Re: [Wireshark-dev] [PATCH] Multiple pdus atop TCP -- a lie in README.developer?
  • Next by thread: Re: [Wireshark-dev] Overriding existing RPC-TCP heuristic dissector with another heuristic one
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation