Wireshark · Wireshark-dev: Re: [Wireshark-dev] Enabling protocol in Decode As dialog

[Robert Cragie <robert.cragie@xxxxxxxxx>]

It doesn't run on top of UDP in the conventional sense but practically and for the purposes of this discussion, yes it does. Thanks for your help - just what I needed.

Robert

On 9 June 2016 at 08:54, Guy Harris <guy@xxxxxxxxxxxx> wrote:

On Jun 8, 2016, at 11:10 PM, Robert Cragie <robert.cragie@xxxxxxxxxxxxx> wrote:

> It's basically an 802.15.4 MAC frame plus an additional byte at the beginning placed into the payload of a UDP datagram.

So the answer to my question is "it runs atop UDP".

So:

        if there's a standard UDP port number atop which it runs, you should...

> The only thing the CoAP dissector does in addition is to add a port using dissector_add_uint()

        ...register it in the "udp.port" dissector with that port number;

        if there *is* no standard UDP port number atop which it runs, you should register it in the "udp.port" dissector with a call to dissector_add_for_decode_as().