This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark dissector: There is a header before Ethernet packets

0

I have my own protocol but I don't know how to create my own wireshark dissector.. Ethernet packets looks like:

[Dst MacAddress][Src MacAddress][Ethertype].....

My protocol add a header:

[My protocol header][Dst MacAddress][Src MacAddress][Ethertype].....

I want to dissect the header and use the Ethernet Protocol to dissect the remaining, what should I do?

asked 14 Nov '14, 06:08

kynton_yu's gravatar image

kynton_yu
11112
accept rate: 0%