Add input parameter to tshark/sharkd

asked 2020-04-26 06:14:00 +0000

yaroni
1 ●2 ●4 ●6

updated 2020-04-26 15:57:16 +0000

I want to add an input parameter to tshark command line and to sharkd as json.

For example:

tshark -new_param_name=new_param_value

In sharkd it will be a new parameter in json file

I want to be able to use these new_param_name/new_param_value in a dissector code ( for example epan/dissectors/packet-gsm_map.c)

What is the correct way to add this parameter in wireshark code? Is there an include file with all global parameters, or special struct defined for this purpose?

Answer: I found that this is the way to send the parameter from command line tshark -o "gsm_sms.new_parameter_name: TRUE"

And in code for example in dissector packet-gsm_map.c prefs_register_bool_preference(gsm_sms_module, "new_parameter_name", "new parameter name", "new parameter description", &global_variable_definition);

My new question is how do i add a parameter that is available by all dissectors ? I want to pass tshark -o "new_parameter_name: TRUE"
without the dissector so it can be used by different dissector, it is relevant to different dissector

edit retag flag offensive close merge delete

add a comment

answered 2020-04-26 07:03:36 +0000

Jaap

13742 ●711 ●115

They way to influence dissectors is to setup or add to the dissector preferences for that dissector. This exposes the setting to the command line as -o <name>:<value>, where name is the preference name, such as protocol.pref_name and value the value of the type of the preference.

edit flag offensive delete link

Comments

Thank you for your answer

So i don't need to add code in the tshark.c?
How do i refer to it in the dissector code?
The preference i want to add is general, not specific to a special decoder.

yaroni ( 2020-04-26 07:07:39 +0000 )edit

yaroni ( 2020-04-26 15:57:36 +0000 )edit

a parameter that is available by all dissectors ?

I.e., this parameter will be relevant to every single dissector in Wireshark, and every single dissector that will ever be added to Wireshark? Or is it just relevant to a small set of dissectors?

Guy Harris ( 2020-04-28 18:16:36 +0000 )edit

Multiple not all dissectord. But I want user to set only one parameter in preference. And not to set multiple parameter.

yaroni ( 2020-04-28 22:33:02 +0000 )edit

What are the dissectors? Perhaps the best way to do it is to have a preference for one dissector and have other dissectors look at it.

Guy Harris ( 2020-04-28 23:35:52 +0000 )edit

Ok how can I look at other dissector preference ? And is there a dissector name that is general (like application or general)? I want all dissector that look at sms messages

yaroni ( 2020-04-29 20:23:36 +0000 )edit

And is there a dissector name that is general (like application or general)? I want all dissector that look at sms messages

Then you don't want a general preference, you want an SMS preference. Currently, there's no "SMS" dissector for all network types, but presumably there's something they all have in common if there could be a single preference to control them all. What would this preference do?

Guy Harris ( 2020-04-29 22:37:53 +0000 )edit

i would like to change the sms text to zero in the save as option in thsark.
1. So which preference should i use?
2. How do i read preference from another dissector?

yaroni ( 2020-04-30 06:01:06 +0000 )edit

What do you mean by "change the SMS text to zero in the save as option in TShark"?

Guy Harris ( 2020-04-30 09:36:49 +0000 )edit

Thank you very much for your help
This is not my question, my question is which preference should i use

yaroni ( 2020-04-30 09:42:02 +0000 )edit

see more comments

Add input parameter to tshark/sharkd

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Add input parameter to tshark/sharkd edit

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Add input parameter to tshark/sharkd