Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Dissecting a portion of a protocol owned by anotherdissector

From: "Anders Broman" <a.broman@xxxxxxxxx>
Date: Tue, 23 Feb 2010 20:11:20 +0100
Not easily, but if you are doing something reasonably like dissecting
Vendor specific fields a patch to the existing dissector providing a "hook"
For a plugin would be acceptable, like registering a dissector table a
Custom plugin could register in.

-----Ursprungligt meddelande-----
Från: wireshark-dev-bounces@xxxxxxxxxxxxx
[mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] För Jeremy O'Brien
Skickat: den 23 februari 2010 19:02
Till: Developer support list for Wireshark
Ämne: [Wireshark-dev] Dissecting a portion of a protocol owned by


I am trying to write a wireshark plugin that dissects only a certain
field of another dissector. I read about writing tap dissectors, but
these seem to still receive entire packets rather than just the
portion I'm interested in. I am trying to avoid copying large chunks
of the main dissector just to get down to the area my dissector is
interested in. Does wireshark provide a way to do this?

Thank you,
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>