Ethereal-dev: Re: [Ethereal-dev] Writing Decoders for Ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Michael Tuexen <Michael.Tuexen@xxxxxxxxxxxxxxxxx>
Date: Mon, 28 Apr 2003 09:35:11 +0200
Hi Sal,

you can also use packet-m3ua.c as an example. ethereal will
handle your data as m3ua if you use that payload protocol identifier
of M3UA or the registered port number for M3UA.

The best way to avoid confusion is to use a not registered payload
protocol identifier for your SCTP traffic. It is a 32 bit integer
and only a few values are used yet.

Best regards
Michael
On Monday, Apr 28, 2003, at 03:10 Europe/Berlin, S. Faizi wrote:

Michael, Erwin, thank you for your help.

Should I use packet_sua.c as an example or is there a better example (m3ua
etc) available for my scenario?

Also, since the protocol I am trying to write the dissector for is not a standard protocol, the payload of SCTP sometimes ends being interpreted as
m3ua (per the current display on ethereal 9.11). Will this cause any
problems?

Best Regards,
Sal

----- Original Message -----
From: "Michael Tuexen" <Michael.Tuexen@xxxxxxxxxxxxxxxxx>
To: "Erwin Rol" <erwin@xxxxxxxxxx>
Cc: "S. Faizi" <salfaizi@xxxxxxx>; "Ethereal Development"
<ethereal-dev@xxxxxxxxxxxx>
Sent: Sunday, April 27, 2003 12:03 PM
Subject: Re: [Ethereal-dev] Writing Decoders for Ethereal


Just write your dissector and register for
- a sctp.ppi and/or sctp.port
- a udp.port

After doing this your dissector will be called by the SCTp
and UDP dissector.

Best regards
Michael

On Sunday, Apr 27, 2003, at 19:18 Europe/Berlin, Erwin Rol wrote:

On Sun, 2003-04-27 at 19:04, S. Faizi wrote:
Hi,

I am interested in writing a decoder for a proprietary protocol. This proprietary protocol is carried by SCTP data chunk, and a few messages
are carried by UDP. I started by reading "README.developer" file in
code directory. Since this would be the first time I would be writing a decoder for ethereal, I wanted to know if there is a better resource available to get me started quickly. Is there an online tutorial etc.


What i did was just take a look at other decoders, the general setup is the same for all of them. And really not that hard, within a few hours you should have a decoder framework in place. For more advanced tricks
find a decoder that does what you need and look at its source.

The source is the best tutorial there is, one of the good things of
OpenSource.


- Erwin

Regards,
Sal
--
              Dipl.-Ing. Erwin Rol - Software Engineering
tel: +49-(0)8024-479377  gsm: +49-(0)171-6929198 fax:
+49-(0)8024-479379
                        email: erwin@xxxxxxxxxx
<signature.asc>

_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev