Wireshark · Ethereal-dev: Re: [Ethereal-dev] dissector - need help

[Nina Pham <nina@xxxxxxxxxxx>]

I have the file under epan/dissectors and add it to DISSECTOR_SRC in 
Makefile.common.  I think my problem is that even when I send the packet 
through port 771, but it is a tcp packet, so ethereal will display as it 
is a tcp protocal packet, not myprot packet. Am I right? I'm not sure if 
I can do like ethereal captures a tcp packet though a specify port and 
displays it  as  a new protocal, or display different than a usual tcp 
packet.

Ulf Lamping wrote:

> Nina Pham wrote:
>
> > attachment is the file which creates new dissector. I just cut and 
> > pasted from readme.developer, change some variables reccomanded from 
> > part 1.3 of readme.developer. I changed ID_VALUE to 771 with the hope 
> > to display my protocol when data is sent through port 771. It build 
> > sucessfully. However, when I ran ethereal, send data through port 771 
> > ( with both way, tcp and udp). The ethereal I just build display 
> > packets just like it usually does for tcp and udp packet. It doesn't 
> > show what I'm expecting. Please take a look at my file and tell me 
> > what I did wrong. Thanks
> You should put your file into the epan/dissectors dir and add it to 
> DISSECTOR_SRC in epan/dissectors/Makefile.common
>
> Regards, ULFL
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev