ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] how do I know that a new capture has been started

From: Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx>
Date: Thu, 21 May 2009 11:01:29 -0600
On Thu, May 21, 2009 at 05:23:52PM +0200, wsgd wrote:

> Into a plugin dissector,
> how do I know that :
> - a new capture has been started
> - a new file is loaded
> 
> reset callback of register_tap_listener ?
> other possibilities ?
> 
> Can I use (or it is normal to use) the tap system on my own protocol ? 
> other possibilities ?

The plugin dissector will be called when a new capture has been started 
that has packets which belong to your plugin dissector.  When a new file 
is loaded, the same happens if there are packets belonging to your 
dissector.  A dissector is called once per packet for every packet 
belonging to it.  What are you trying to accomplish?


Steve