Thank you, Jaap
John
> Date: Wed, 22 Jun 2011 08:23:23 +0200
> From: jaap.keuter@xxxxxxxxx
> To: wireshark-dev@xxxxxxxxxxxxx
> Subject: Re: [Wireshark-dev] ask about dissector_add ( ) function to instruct wireshark to pass packet to my dissector
>
> Hi,
>
> Have a look at packet-rtp.c, which does a similar thing.
>
> Check for heur_dissector_add( "udp", dissect_rtp_heur, proto_rtp);
>
> Thanks,
> Jaap
>
>
> On 06/22/2011 05:59 AM, cq x wrote:
> > thank you
> >
> > on top of UDP
> >
> > yes, it is looking for a special value in the first byte of the packet
> >
> > Thanks again
> >
> >
> >
> >
> > > From: guy@xxxxxxxxxxxx
> > > Date: Tue, 21 Jun 2011 17:56:37 -0700
> > > To: wireshark-dev@xxxxxxxxxxxxx
> > > Subject: Re: [Wireshark-dev] ask about dissector_add ( ) function to instruct
> > wireshark to pass packet to my dissector
> > >
> > >
> > > On Jun 21, 2011, at 4:18 PM, Changqin Xia wrote:
> > >
> > > > I am a newbie on dissector development. I have a question about the
> > "dissector_add( )" function.
> > > >
> > > > I went through a few examples, most of them are using "tcp.port" or
> > "udp.port" or something like that.
> > > >
> > > > My dissector not uses any port number to instruct wireshark to pass packets
> > to my dissector, my dissector is using "Magic" (the first byte).
> > >
> > > What protocol does your dissector's protocol run on top of? TCP, UDP, or
> > something els e?
> > >
> > > And when you say "my dissector is using "Magic" (the first byte)", do you
> > mean it's looking for a special magic value in the first byte of its packet data?
>
> ___________________________________________________________________________
> Sent via: Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
> mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
