Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] heuristic Dissector for Dummies

From: "Tom Stevens" <tomstevens@xxxxxxx>
Date: Fri, 29 Aug 2008 18:28:21 +0200
Hello!

Is there a simple tutorial on the web where i can find some information about how to write a heuristic dissector.

http://www.wireshark.org/docs/wsdg_html_chunked/ChapterDissection.html -> On this side i couldn't find anything about heuristic dissectors.

May you recommend a code snipet, where i can learn how to write a heuristic dissector by my own.

Where and how can i define the rules (pattern) that wireshark needs to find the corresponding dissector?
To what points do I have to pay particular attention when i write such a dissector?

Thanks in advance Tom(Germany)