Wireshark mailing list archives

Re: Duplicate heuristic short_name "XYZ"


From: Michael Mann <mmann78 () netscape net>
Date: Sun, 3 Jan 2016 12:35:51 -0500


To make Decode As less confusing, Wireshark is enforcing unique protocols for each table so duplicate entries don't 
show up in a Decode As list.  This was a bigger problem with TCP and UDP were 1 protocol would have multiple dissectors 
that would do drastically different dissection, but you couldn't tell which was which from the dialog.
 
As a result, you can't register two dissection functions associated with the same protocol ID.  The fix is to create  
"placeholder" protocol ID.
For example, you have your "XYZ" protocol ID, and you would add "XYZ over USB Bulk" protocol ID to use for your 
heuristic dissection.  The "placeholder" protocol ID doesn't actually need to be called in your dissection (so 
filtering with it won't do anything)

 
 
 
-----Original Message-----
From: Oleksii Shevchuk <alxchk () gmail com>
To: wireshark-dev <wireshark-dev () wireshark org>
Sent: Sun, Jan 3, 2016 11:34 am
Subject: [Wireshark-dev] Duplicate heuristic short_name "XYZ"

Hi list!

After update to wireshark 2 I meet next problem.
Wireshark crashes with `Duplicate heuristic short_name "XYZ"! This
might be caused by an inappropriate plugin or a development
error.` message.
XYZ is my plugin written in lua. In this plugin I have one dissector,
one heuristic dissector function and two tables where I put them - usb.bulk and usb.interrupt.
When I comment out one table, wireshark starts without crash.

The question is - how to add heuristic dissector to two tables properly now?

// wbr
// Oleksii Shevchuk
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: