ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] ask about dissector_add ( ) function to instruct wireshark t

Date: Wed, 22 Jun 2011 12:00:18 +0800
thank you, Chris,

I will take a look at it

Thanks

> To: wireshark-dev@xxxxxxxxxxxxx
> From: Christopher.Maynard@xxxxxxxxx
> Date: Wed, 22 Jun 2011 00:48:13 +0000
> Subject: Re: [Wireshark-dev] ask about dissector_add ( ) function to instruct wireshark to pass packet to my dissector
>
> Changqin Xia <xiachangqin66@...> writes:
>
> > Hi, allI am a newbie on dissector development. I have a question about the
> "dissector_add( )" function.I went through a few examples, most of them are
> using "tcp.port" or "udp.port" or something like that.My dissector not uses any
> port number to instruct wireshark to pass packets to my dissector, my dissector
> is using "Magic" (the first byte).  Any one can tell me if I use the magic
> number to realize dissector_add( ) function, what should I do?  any example? any
> other dissector in the same way? or Any part on the "README.developer" talking
> about this?ThanksJohn
>
> The new name of the function is dissector_add_uint() and there are plenty of
> examples where it's used to register a value in dissector tables other than
> tcp.port or udp.port. One of MANY such examples can be found in packet-ip.c:
>
> dissector_add_uint("ethertype", ETHERTYPE_IP, ip_handle);
>
> If you're using Wireshark 1.6, you can view all the tables through "Internals ->
> Dissector tables". The string tables and integer tables are segregated.
>
>
>
> ___________________________________________________________________________
> Sent via: Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
> mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe