Ethereal-dev: Re: [Ethereal-dev] Creating a new decode

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 17 Dec 2003 19:01:22 -0800

On Dec 8, 2003, at 3:30 PM, Craig Bumpstead wrote:

I would like to create a decode for a protocol that is not currently
supported.

Does anyone have any tips or advice on where to start.

Start by reading the README.* files in the "doc" directory of the Ethereal source tree, starting with "README.developer". Then look at dissectors for some simple protocols; if you can find any that might be similar to the one for which you're writing a dissector, try those first.