Wireshark mailing list archives

Re: Same protocol dissector in built-in and plugin form coexisting under different names?


From: Anders Broman <anders.broman () ericsson com>
Date: Mon, 31 Oct 2011 15:39:05 +0100

Hi,
If possible it's better to try to do that via hooks in the existing dissector.
packet-gtp.c has a dissector table to dissect protocol extension by vendor ID if the protocols extension mechanism is 
used.
Regards
Anders

________________________________
From: wireshark-dev-bounces () wireshark org [mailto:wireshark-dev-bounces () wireshark org] On Behalf Of David Wei HX
Sent: den 31 oktober 2011 08:51
To: wireshark-dev () wireshark org
Subject: [Wireshark-dev] Same protocol dissector in built-in and plugin form coexisting under different names?

Dear Wireshark community,

Is it possible to have two dissectors for the same protocol, one built-in and one as a plugin, with the plugin having a 
slightly different name that can dissect additional (perhaps proprietary) information?

For example, without modifying the built-in GTP dissector, can I add a GTP-Ericsson dissector as a plugin and disable 
the built-in GTP dissector by modifying the disabled_protos file?

I have attempted this but found that I must modify libwireshark.def and recompile in order for the plugin to find 
certain definitions.

Best regards,
David Wei


___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: