Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] why cannot I use heur_dissector_add("ip", .....

Date: Sun, 26 Jun 2011 13:26:47 +0800
the following is an example from README.heuristic

-------------------------------
void
proto_reg_handoff_PROTOABBREV(void)
{
    static int PROTOABBREV_inited = FALSE;
 
    if ( !PROTOABBREV_inited )
    {
        /* register as heuristic dissector for both TCP and UDP */
        heur_dissector_add("tcp", dissect_PROTOABBREV, proto_PROTOABBREV);
        heur_dissector_add("udp", dissect_PROTOABBREV, proto_PROTOABBREV);
    }
}

----------------------------------

Why cannot I use ip, like: heur_dissector_add("ip", dissect_PROTOABBREV, proto_PROTOABBREV);   ?


Thanks
John