How to add a plugin to wireshark without the source code ?

plugin

asked 2020-07-30 09:04:28 +0000

lucasCl
3 ●2 ●2 ●3

Hi all,

I've created a C based dissector to run it on Wireshark version 1.10.14. I am working on CentOS and I compiled my packet-XXX.c with gcc to get a .so in order to use it as the other plugins. However, I have experienced issues : the first one was a version problem when I opened wireshark : "The plugin has no version symbol". I've added 'G_MODULE_EXPORT gchar version[] = "1.0.0"; ' to my plugin. It worked.

Then I had this error : 'the plugin has neitehr a register routine, a register_tap_listener or a register_wtap_module or a register_codec_module routine'.

I don't know how to solve the problem.

What are the steps to add a .so plugin to wireshark without usingWireshark's source code ?

Thanks for your answers

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2020-07-30 10:54:35 +0000

Jaap

13730 ●684 ●115

You need to make sure that the plugin is compiled in the context of the Wireshark version you try to use it with. So if it was made to be used with Wireshark 1.10, it needs to be compiled with that version of the Wireshark source code. If you want to use it with another version of Wireshark, the plugin source code may need to be adapted to work with that version of the internal APIs and build in the context of that version of the Wireshark source code.

So the answer is, it depends. It depends on the version of Wireshark for which the plugin was build.

edit flag offensive delete link

Comments

While others may have achieved it, there is no official way to compile a plugin without compiling the rest of Wireshark first to produce the required configuration and link library files.

grahamb ( 2020-07-30 11:07:28 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2020-07-30 09:04:28 +0000

Seen: 684 times

Last updated: Jul 30 '20

How to add a plugin to wireshark without the source code ? edit