Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

How to setup a totally new dissector for the data without UDP/TCP header

In the chapter 9.2.1 of developing guide book,

there is a disssector example 9.2. (Dissector Handoff)

void proto_reg_handoff_foo(void)

{

static dissector_handle_t foo_handle;

foo_handle = create_dissector_handle(dissect_foo, proto_foo);

dissector_add_uint("udp.port", FOO_PORT, foo_handle);

}

The example always has a related basement, like UDP, TCP or so on. I would like to parse the whole enhanced packet block (data payload) from the first byte(bit) [of course, I have a header in the packet, to identify it from other interface's protocol ], how to wirte the code?

I try to follow plugins\grython code and the developing guide book, but all code are related with some conditions, like udp, or tcp, and just parse the data from a special port, I would like to get help for the new idea.

Thanks in advance.

click to hide/show revision 2
None

How to setup a totally new dissector for the data without UDP/TCP header

In the chapter 9.2.1 of developing guide book,

there is a disssector example 9.2. (Dissector Handoff)

void proto_reg_handoff_foo(void)

{

void proto_reg_handoff_foo(void)
{

    static dissector_handle_t foo_handle;

 foo_handle = create_dissector_handle(dissect_foo, proto_foo);

 dissector_add_uint("udp.port", FOO_PORT, foo_handle);
}

}

The example always has a related basement, like UDP, TCP or so on. I would like to parse the whole enhanced packet block (data payload) from the first byte(bit) [of course, I have a header in the packet, to identify it from other interface's protocol ], how to wirte the code?

I try to follow plugins\grython code and the developing guide book, but all code are related with some conditions, like udp, or tcp, and just parse the data from a special port, I would like to get help for the new idea.

Thanks in advance.