Apply protocol when start frame is recognized

asked 2021-03-02 15:12:08 +0000

Hello everybody!

I made a dissector in lua for a custom protocol. I can apply my dissector when it recognizes the port it is registered to.

Now I have a PCAP trace file with only the no., timestamp, length and data.

The data always starts with a specific hex byte ("0x2F"). How can I apply my dissector on this data? Is there a way to let it recognize this specific start frame?

Kind regards, Tom

edit retag flag offensive close merge delete