Ask Your Question

Custom ecpri dissector based on original implementation

asked 2024-04-15 08:57:25 +0000

updated 2024-04-15 09:04:58 +0000

grahamb gravatar image


I need some modification to basic epan/dissectors/packet-ecpri.c implementation so i thought eses way to pull it will be:

do modification in packet-ecpri.c

compile plugins target

Copy lib .so file to current wireshark installation "/usr/lib/x86_64-linux-gnu/wireshark/plugins/4.0/epan" but using nm -D i have checked all libs for "proto_register_ecpri" symbol and it is not there, so in which library this object /build/epan/dissectors/CMakeFiles/dissectors.dir/packet-ecpri.c.o is linked, and where it is located on ubuntu 22.04 installation so i can switch it after compilation or i'm completely wrong and this is not right approach ?

edit retag flag offensive close merge delete


epan/dissectors/packet-ecpri.c is not forgotten commits.
If your "some modification" would benefit others you could open a Enhancement Request.

Before attempting to modify the .so have you gone through the UN*X build process?
Once that is successful and if the change benefits others you could make a merge request 3.9. Make Changes To The Wireshark Sources.

Chuckc gravatar imageChuckc ( 2024-04-15 12:51:27 +0000 )edit

I am curious about the changes you need to make. I made it call the ORAN FH CUS dissector for the message types it handles (discarding my company's eCPRI dissector).

MartinM gravatar imageMartinM ( 2024-04-16 22:05:01 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted

answered 2024-04-18 07:48:44 +0000

Thanks Chuck I was able to build and install modified wireshark and it works. About my changes it only for debug purpose, i have some custom payload on message type four, and instead manual inspection on raw data i would like to have additional subtree and fields to ease my work.

edit flag offensive delete link more


i would like to have additional subtree and fields to ease my work

It may be easier/quicker with a Lua script. Iterative changes without needing a recompile.
("quicker" depends on time to spin up on Lua language. :-) )

Chuckc gravatar imageChuckc ( 2024-04-18 09:46:06 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2024-04-15 08:57:25 +0000

Seen: 44 times

Last updated: Apr 18