Did you add the magic info into the magic_files array in
wiretap/mime_file.c? It looks like it's necessary.
-hadriel
On Sun, Aug 30, 2015 at 4:22 AM, Joerg Mayer <jmayer@xxxxxxxxx> wrote:
> Hello,
>
> I'm trying to write a file dissector for the IxVeriWave (.vwr) capture files
> (without loosing the ability to open said capture files normally of course)
> and am failing:
> Running "tshark -X 'read_format:MIME Files Format' -V -r testfile.vwr" (or
> the equivalent steps in wireshark) results in
> tshark: The file "testfile.vwr" isn't a capture file in a format TShark understands.
> Trying to just take over the complete capture file was also unsuccessful.
> I've attached the current source of the dissector. Simple question: What am
> I missing ;-)
> In case you want to test, use the capture attached to bug 11464.
>
> Thanks
> Jörg
>
>
> --
> Joerg Mayer <jmayer@xxxxxxxxx>
> We are stuck with technology when what we really want is just stuff that
> works. Some say that should read Microsoft instead of technology.
>
> ___________________________________________________________________________
> Sent via: Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives: https://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
> mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
