Ethereal-dev: Re: [Ethereal-dev] Decode as

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 5 May 2003 11:58:45 -0700
On Mon, May 05, 2003 at 11:53:14PM +1000, Ronnie Sahlberg wrote:
> In the DecodeAs.. dialog for say
> TCP or UDP packet only those protocols that are registered to use a TCP/UDP
> port
> will appear.
> 
> I.e.  dissector_add("tcp.port", 111, rpc_tcp_handle);
> will make the RPC protocol available in DecodeAs...

...and will also use it for port 111, which is appropriate for the RPC
dissector (as port 111 is used for an RPC protocol, namely
portmap/rpcbind).

However, it's not always appropriate to specify a port number for a
protocol; I suspect it's not appropriate in Andreas' dissector, for
example.

In those cases, you do

	dissector_add_handle("tcp.port", xxx_handle);

(using the appropriate dissector table and handle).