Link16 not a packet type, yet the dissector is in epan/dissectors.

asked 2020-03-10 14:10:54 +0000

JimBob gravatar image

I have built wireshark-3.2.1 from source. I checked the epan/disscectors directory and there is a .c and .h file for link 16. Yet when I start wireshark, link16 is not listed as a supported protocol.

edit retag flag offensive close merge delete


I have a 3.2.1 build on Ubuntu and see LINK16 under Analyze->Enable Protocols....
Can you add the output of wireshark -v or Help -> About Wireshark.

Chuckc gravatar imageChuckc ( 2020-03-10 14:22:13 +0000 )edit

I am building on Centos 7. The gist of the output is thus: compiled (64bit) eith GTK+2.24.31 Cairo 1.14.8 Pango 1.40.4 Glib 2.54.2 libpcap libz 1.2.7 POSIX without libnl with SMI 0.4.8 c-ares 1.10.0 Lua 5.1 without Python with GnuTLS 3.3.26 Gcrypt 1.5.3 MIT Kerberos without GeoIP without PortAudio with AirPcap

Running on Linux 3.10.0-1062.9.1.el7.x86_64 with locale en_US.UTF-8 libpcap version 1.5.3 libz1.2.7 GnuTLS 3.3.29 Gcrypt 1.5.3 without AirPcap

Intel Xeon SIlver 4114 CPU

Built using gcc 4.8.5 20150623 (Redhat 4.8.5-36)

JimBob gravatar imageJimBob ( 2020-03-10 14:56:29 +0000 )edit

BTW - according to my references LINK16 falls under ITAR regulations.

JimBob gravatar imageJimBob ( 2020-03-10 14:58:12 +0000 )edit

My mistake - I wasn't running the correct version when I was dissecting, but was when I looked at version info!

JimBob gravatar imageJimBob ( 2020-03-10 15:15:51 +0000 )edit

according to my references LINK16 falls under ITAR regulations.

According to the people who wrote the Link 16 dissector - who work for the Australian Department of Defence - it was written from "sources from the open literature on Link 16".

Guy Harris gravatar imageGuy Harris ( 2020-03-10 20:44:35 +0000 )edit