Wireshark · Ethereal-dev: [Ethereal-dev] Dissector_add for an OUI value or even a MAC DA

[Jeremy Georges <jgeorges@xxxxxxxxxxxxxxxxxxx>]

Hope everyone is doing well!

I'm in the process of writting a dissector for some L2 protocols that are
encapsalated in a SNAP packet. Two approaches I can take, either utilize the
OUI ID of 0x00E02B or a couple of specific Destination MAC addresses that
are used for the protocol. 

My issue that I'm having is figuring out what PARENT_SUBFIELD options I
have. There is lots of info on tcp or udp based options (like tcp.port) But
what options do I have for an OUI specific value or a destination MAC
address?

I apoligize if this has already been asked, but I can't seem to find an
exhaustive list anywhere that gives all possible fields that ethereal
supports for dissector_add() function (specifically the PARENT_SUBFIELDS). 


I wish I could do a dissector_add("oui.value", 0x00e02b, myproto_handle).
Even a dissector_add("ethernetdestinationaddress.value", 00e02b000002,
myproto_handle) would work...... But I'm not sure if this or which
PARENT_SUBFIELDS are valid. 

Can someone please shed some light on the matter for me. Again, I apoligize
if someone touched on this already, since I'm new to writing code with
Ethereal.

Thanks,

-Jeremy