Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] heuristic Dissector for Dummies

From: didier <dgautheron@xxxxxxxx>
Date: Mon, 01 Sep 2008 17:48:16 +0200
Hi,
Le samedi 30 aoᅵt 2008 ᅵ 12:59 +0200, Tom Stevens a ᅵcrit :
> Thank you very much for your great explanation. Something i had known
> before, but thanks anyway.
> Particularly the Point " How do these heuristics work?" and your given
> example should be very useful for anybody who wants to know how a
> heuristic dissector work.
> 
> My Problem is, that i have to write an heuristic dissector by my own.
> Hence,I need code snippets or something else, that will show me how to
> put my ideas (searching patterns) down on paper (C - source code ).
grep -l heur_dissector_add epan/dissectors/*.c
returns  69 files.

Could simple ones, like packet-tali.c or packet-pktgen.c, answer your
questions?

Didier