ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] how to disable dissectors when I build TShark ?

From: "Jean-Grégoire Foulon" <jg.foulon.dev@xxxxxxxxxxxxxx>
Date: Thu, 5 Jul 2007 16:43:01 +0100
On 7/5/07, Shehjar Tikoo <shehjart@xxxxxxxxxxxxxxx> wrote:
Jean-Grégoire Foulon wrote:
> I just managed to have a lib 50% smaller by removing some protocols. I will
> try to post a diff file here (or somewhere else) when I have a satisfying
> result.
> I think it can be useful for people trying to get a lightweight version but
> I don't think I will have time to do something clean and generic enough to
> be integrated into the repository.

To make this info more accessible, is it possible to put up a wiki
page about this? Preferably on wiki.wireshark.org?

Shehjar

Ok, as soon as I have something working like I want... by the way, currently it doesn't ;-)
I removed some more dissectors, and now, some assertions fail. Some protocols are linked together in a more or less obvious way :
-The Telnet dissector depends on kerberos, I had to comment some line int packet-telnet.c to remove dependencies to kerberos. It was the easy part.
-The Arp dissector is linked to arcnet because it calls "dissector_add(" arcnet.protocol_id", ARCNET_PROTO_ARP_1051, arp_handle);" it is hard to detect, and I don't know if there would be an easy way to modify Wireshark code to avoid such dependencies.

So I will probably have to comment a lot of those call to suppress the dependencies. My patch might be bigger than I expected, I hope the wiki allows to upload files.
 
Jean-Gregoire