How do I go about adding a new protocol

asked 2021-02-21 18:36:11 +0000

teknopaul
1 ●1 ●1 ●1

I'd like to add the work ongoing here

https://djl-analysis.deepsymmetry.org...

into wireshark, so that CDJ packets are rendered as such. All packets have a magic number and hardcoded ports so they should be quite easy to spot.

I have a quick hunt around the wiki and src code but I dont see where to get started.

Is there a packet dscription format or do we write C/C++?

edit retag flag offensive close merge delete

add a comment

2 Answers

Sort by » oldest newest most voted

answered 2021-02-22 10:08:31 +0000

grahamb

flag of United Kingdom of Great Britain and Northern Ireland

23835 ●4 ●976 ●227 https://www.wireshark.org

There are a number of options when adding a new dissector, some of them are discussed in my SharkFest presentation How to write a Dissector.

If using C (note C++ is not currently supported for dissectors) or Lua, then the Wireshark Developers Guide and the various README.xxx files in the source tree doc directory are essential reading.

edit flag offensive delete link

add a comment

answered 2021-02-25 07:35:35 +0000

Uli
1123 ●1 ●25 ●23

There is already an enhancement request to implement this protocol: https://gitlab.com/wireshark/wireshar...

edit flag offensive delete link

add a comment