Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: [Wireshark-dev] Calling other dissectors and returning

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Kevin A. Noll" <spamknoll@xxxxxxxxxxxxx>
Date: Thu, 03 May 2007 10:07:22 -0400

 
I am trying to finish writing additional decode details for the WLCCP
dissector. In places, though, the WLCCP protocol carries other protocol data
that I'd like to decode, but not re-write the code.

I know I can call other dissectors, but it's not apparent to me (an amateur)
how or if they return to the original dissector, which is what I would need
to do. For example, WLCCP can embed EAPOL messages as follows:


1. Generic WLCCP Headers
2. WLCCP Message-Type Specific Headers
2a. Embedded EAPOL
3. More WLCCP Message-Type Specific Data 4. Possibly some variable TLV
information


I need to be able to call the external EAPOL dissector and return to the
WLCCP dissector to finish dissecting the WLCCP headers and TLVs.

I would be much obliged if someone could give me a pointer on how to do this
and/or to a dissector that does something similar.


Thanks!

--kan--
--
Kevin A. Noll, KD4WOZ
CCIE, CCDP
Versatile, Inc.		
Kevin.Noll@xxxxxxxxxxxxx
+1-717-796-1936


  • Follow-Ups:
    • Re: [Wireshark-dev] Calling other dissectors and returning
      • From: Joerg Mayer
  • Prev by Date: [Wireshark-dev] Strangest thing ever !!! Captures only TCP 3-way handshake negotiation and not any data ?!?
  • Next by Date: Re: [Wireshark-dev] Calling other dissectors and returning
  • Previous by thread: Re: [Wireshark-dev] Strangest thing ever !!! Captures only TCP 3-way handshake negotiation and not any data ?!?
  • Next by thread: Re: [Wireshark-dev] Calling other dissectors and returning
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation