Wireshark mailing list archives
Re: Same protocol dissector in built-in and plugin form coexisting under different names?
From: Anders Broman <anders.broman () ericsson com>
Date: Mon, 31 Oct 2011 15:39:05 +0100
Hi, If possible it's better to try to do that via hooks in the existing dissector. packet-gtp.c has a dissector table to dissect protocol extension by vendor ID if the protocols extension mechanism is used. Regards Anders ________________________________ From: wireshark-dev-bounces () wireshark org [mailto:wireshark-dev-bounces () wireshark org] On Behalf Of David Wei HX Sent: den 31 oktober 2011 08:51 To: wireshark-dev () wireshark org Subject: [Wireshark-dev] Same protocol dissector in built-in and plugin form coexisting under different names? Dear Wireshark community, Is it possible to have two dissectors for the same protocol, one built-in and one as a plugin, with the plugin having a slightly different name that can dissect additional (perhaps proprietary) information? For example, without modifying the built-in GTP dissector, can I add a GTP-Ericsson dissector as a plugin and disable the built-in GTP dissector by modifying the disabled_protos file? I have attempted this but found that I must modify libwireshark.def and recompile in order for the plugin to find certain definitions. Best regards, David Wei
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Same protocol dissector in built-in and plugin form coexisting under different names? David Wei HX (Oct 31)
- Re: Same protocol dissector in built-in and plugin form coexisting under different names? Anders Broman (Oct 31)