Ask Your Question
0

How to add a plugin to wireshark without the source code ?

asked 2020-07-30 09:04:28 +0000

lucasCl gravatar image

Hi all,

I've created a C based dissector to run it on Wireshark version 1.10.14. I am working on CentOS and I compiled my packet-XXX.c with gcc to get a .so in order to use it as the other plugins. However, I have experienced issues : the first one was a version problem when I opened wireshark : "The plugin has no version symbol". I've added 'G_MODULE_EXPORT gchar version[] = "1.0.0"; ' to my plugin. It worked.

Then I had this error : 'the plugin has neitehr a register routine, a register_tap_listener or a register_wtap_module or a register_codec_module routine'.

I don't know how to solve the problem.

What are the steps to add a .so plugin to wireshark without usingWireshark's source code ?

Thanks for your answers

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2020-07-30 10:54:35 +0000

Jaap gravatar image

You need to make sure that the plugin is compiled in the context of the Wireshark version you try to use it with. So if it was made to be used with Wireshark 1.10, it needs to be compiled with that version of the Wireshark source code. If you want to use it with another version of Wireshark, the plugin source code may need to be adapted to work with that version of the internal APIs and build in the context of that version of the Wireshark source code.

So the answer is, it depends. It depends on the version of Wireshark for which the plugin was build.

edit flag offensive delete link more

Comments

While others may have achieved it, there is no official way to compile a plugin without compiling the rest of Wireshark first to produce the required configuration and link library files.

grahamb gravatar imagegrahamb ( 2020-07-30 11:07:28 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2020-07-30 09:04:28 +0000

Seen: 45 times

Last updated: Jul 30