samyc@xxxxxxx wrote:
Hi all,
I'm trying to figure out if it is possible for wireshark to handle many versions
of the same protocol. Ex I wrote a plugin handling v1 of foo protocol, now this
protocol has evolved and I need to write a v2 plugin. is it possible for
wireshark to handle both version in the same session? that is without replacing
the fooPluginv1.dll fooPluginV2.dll?
This is most commonly done by updating the plugin/dissector to handle
both v1 and v2. The choice as to which version to decode a particular
packet as can be done heuristically (if you're so inclined) or by a
preference. For an example see the M2PA dissector
(epan/dissectors/packet-m2pa.c): it dissects versions 2, 6, and 12 of
the M2PA draft based on a preference.
