ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] yhoo broke?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Tue, 30 Oct 2001 20:48:43 -0800
On Tue, Oct 30, 2001 at 09:31:07PM -0600, Nathan Neulinger wrote:
> What is packet-yhoo.c missing that would get it added to the decode-as
> list?

A non-heuristic dissector, and a call to "conv_dissector_add()" passing
it a pointer to the non-heuristic dissector.

Heuristic dissectors don't show up in the "Decode As" list; protocols in
that list have to have dissectors that return "void", not "gboolean".

If you want it to show up in the "Decode As" list, write a non-heuristic
dissector, have the heuristic dissector call it if the packet passes the
test, and register the non-heuristic dissector in the "tcp" or "udp"
conversation-dissector list with "conv_dissector_add()".