We're now a non-profit! Support open source packet analysis by making a donation.

Wireshark-dev: Re: [Wireshark-dev] Dissecting a portion of a protocol owned by anotherdissector

From: "Anders Broman" <[email protected]>
Date: Tue, 23 Feb 2010 20:11:20 +0100
Not easily, but if you are doing something reasonably like dissecting
Vendor specific fields a patch to the existing dissector providing a "hook"
For a plugin would be acceptable, like registering a dissector table a
Custom plugin could register in.

-----Ursprungligt meddelande-----
Från: [email protected]
[mailto:[email protected]] För Jeremy O'Brien
Skickat: den 23 februari 2010 19:02
Till: Developer support list for Wireshark
Ämne: [Wireshark-dev] Dissecting a portion of a protocol owned by


I am trying to write a wireshark plugin that dissects only a certain
field of another dissector. I read about writing tap dissectors, but
these seem to still receive entire packets rather than just the
portion I'm interested in. I am trying to avoid copying large chunks
of the main dissector just to get down to the area my dissector is
interested in. Does wireshark provide a way to do this?

Thank you,
Sent via:    Wireshark-dev mailing list <[email protected]>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:[email protected]?subject=unsubscribe