ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] How do I get my dissector to work in theDisplay Filter

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Wed, 21 Feb 2007 22:20:08 -0800
On Wed, Jan 31, 2007 at 12:14:07AM -0900, Hal Lander wrote:

> In the function proto_register_foo(void) I register the protocol using 
> the line;
> 
> proto_foo = proto_register_protocol("Top level text for foo","foo", 
> "foo");
> 
> I notice you say lineS, am I missing something? The thing is the 
> dissector is called and the all the other fields are visible in the 
> 'expressions' dialog so it looks as if the registration worked, but 
> there is something not quite right.

Sorry for the delay in responding.  There should be a section 
called proto_reg_handoff_<proto name> that contains lines such as 
this:

        dissector_handle_t foo_handle;

        foo_handle = create_dissector_handle(dissect_foo, proto_foo;
        dissector_add("tcp.port", 5000, foo_handle);


Steve