Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: Re: [Wireshark-dev] dissecting data portion of IP

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Wed, 31 Oct 2007 18:36:39 -0600

On Wed, Oct 31, 2007 at 03:03:12PM -0700, Guy Harris wrote:
> 
> On Oct 31, 2007, at 1:58 PM, Daniel Roman wrote:
> 
> > The IP Header of my packet contains 0xC8 for the Protocol Type. Can
> > I do dissector_add("ip.proto", 0xC8, myprotocol_handle); to instruct
> > wireshark to call my dissector if an IP protocol type of 0xC8 is >
> encountered?
> 
> ...that is what you should do.

Better yet, add your protocol's abbrevation and decimal number toward
the end of epan/ipproto.h and call dissector_add("ip.proto",
IP_PROTO_xxx, myprotocol_handle).


Steve


  • Follow-Ups:
    • Re: [Wireshark-dev] dissecting data portion of IP
      • From: Guy Harris
  • Next by Date: Re: [Wireshark-dev] dissecting data portion of IP
  • Next by thread: Re: [Wireshark-dev] dissecting data portion of IP
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation