Wireshark · Ethereal-dev: Re: [Ethereal-dev] Newbie question

[Guy Harris <guy@xxxxxxxxxxxx>]

On Sat, Jul 12, 2003 at 06:07:12PM -0700, Marcos wrote:
> I writing a plugin that dissect a proprietary protocol
> in UDP packet.
> The protocol uses 10 diferents udp ports
> Is it possible to know what the number of port and the
> time stamp of packet inside of dissector??

Yes.

If your dissector registered itself with 10 different UDP port numbers,
then, if it's called because the UDP port number matched, the port
number that matched is in "pinfo->match_port".

The time stamp of the packet is in "pinfo->fd->abs_secs" and
"pinfo->fd->abs_usecs", which is the absolute time stamp of the packet
in seconds and microseconds since January 1, 1970, 00:00:00 GMT.