Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] question about tcap sub-dissector

From: Risto Paasila <risto@xxxxxxxxxxxxxxxx>
Date: Tue, 3 May 2011 10:46:07 +1000
> To call tcap from your dissector you should create a new tvb with the remaining data after your first sub dissector is done then call tcap trough a "handle". ( call_dissector(tcap_handle, tvb, pinfo, tree);)
> In proto_reg_handoff get the tcap handle
> tcap_handle = find_dissector("tcap");
>
> In the TCAP data there should be something like
> application-context-name: 0.4.0.0.1.0.2.2 (locationCancellationContext-v2)
> I presume. If that's the case you can register an "oid dissector" for the rest of the data like in gsm_map
>
>        register_ber_oid_dissector_handle("0.4.0.0.1.0.2.2", map_handle, proto_gsm_map,"locationCancellationContext-v2" );
>
> Regards
> Anders

Thank you for the answer, which seems to be a fair answer, but I
believe that each packet should then contain an ACN or SSN.
Unfortunately for me, the data packets do not.

I have resorted to have my own tcap dissector, which also contains the
sub-dissector. Fortunately it works fine this way too.

Risto.