Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] hello, and a question about making a layer 2 dissector

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Mon, 15 Dec 2008 16:37:48 -0700
On Mon, Dec 15, 2008 at 02:48:24PM -0600, Brett L. Trotter wrote:

> I've googled around and looked at tutorials for creating dissectors, 
> but couldn't find much in the way of detailed examples for creating a 
> layer 2 dissector. I'd like to try and make one for another open 
> source project and was wondering if anyone could point me in the right 
> direction for how to get started or where to look?

Take a look at epan/dissectors/packet-llt.c for a simple example of a 
dissector for a specific ethertype.  The ethertypes are defined in 
epan/etypes.h.


Steve