Wireshark-dev: Re: [Wireshark-dev] dissecting data portion of IP
Date Next Thread Next
From: Stephen Fisher <[email protected]>
Date: Wed, 31 Oct 2007 18:36:39 -0600
On Wed, Oct 31, 2007 at 03:03:12PM -0700, Guy Harris wrote:
> 
> On Oct 31, 2007, at 1:58 PM, Daniel Roman wrote:
> 
> > The IP Header of my packet contains 0xC8 for the Protocol Type. Can
> > I do dissector_add("ip.proto", 0xC8, myprotocol_handle); to instruct
> > wireshark to call my dissector if an IP protocol type of 0xC8 is >
> encountered?
> 
> ...that is what you should do.

Better yet, add your protocol's abbrevation and decimal number toward
the end of epan/ipproto.h and call dissector_add("ip.proto",
IP_PROTO_xxx, myprotocol_handle).


Steve