Wireshark-dev: Re: [Wireshark-dev] Protocol development
From: prashanth joshi <[email protected]>
Date: Wed, 13 Dec 2006 07:53:09 -0800 (PST)
Hi our requirement is as follows:
The packets are sent from the  application to a particular multicast ip address.
Now we want ethereal to capture these packets from the network.
So as I have observed for the implemnation of a protocol, a dissector has to be registered with a port. But I really dont know how they are getting the packets capturing at the ip layer. I mean I dont know how ethereal recognizes the ip address on which it has to capture the ip packets. Pleaseb any one tell me how this can be done. Besos we are supposed to implement our protocol for a particular multicast address and a particular udp port.

[email protected] wrote:

You can't as you said "register a protocol for an IP address" ... but you can
register a plugin which will dissect your protocol.
If you only want the dissection for a particular IP address, wireshark allows
you to create a filter (capture or display).

for a plugin implementation in wireshark see the documentation

Sebastien Tandel

Selon prashanth joshi :

> Hi all,
> We are required to develop a protocol on ethereal. The packets are sent to
> a particular ip address and the ethereal is supposed to capture packets from
> that ip address. Please any one tell me how to register our protocol for that
> ip address.
> Regards,
> Prashanth.
> ---------------------------------
> Everyone is raving about the all-new Yahoo! Mail beta.

Wireshark-dev mailing list
[email protected]

Need a quick answer? Get one in minutes from people who know. Ask your question on Yahoo! Answers.