Wireshark · Ethereal-dev: Re: AW: [Ethereal-dev] direct dissect with plugin

[Guy Harris <gharris@xxxxxxxxx>]

Lars Dörner wrote:
> I think there was a misunderstanding.
> "Decode As" is working!
> I'm looking for an option us this functionality without "decode as"

Yes, I know.  That's why I gave the answer that I did, which answers the 
question of how you arrange that a dissector recognize a particular 
protocol automatically.

> For example: I'm loading my capture file and it will automatically decoded
> as my protocol in the plug-in if the Port is used. 
>
> Is there any possibility do realize that?

To what does "the port" refer?  If you mean a particular port number, 
then you'd either have to make that a fixed port number that you can't 
change, or make it a configuration option that the user can select, and 
then use "dissector_add()" in your dissector's "handoff registration" 
routine to register with that port number in the "tcp.port" dissector 
table (if it's a configuration option, you'd need to un-register with 
the old port number an register with the new port number when the option 
is changed).

I.e., you'd have to use options 1) or 2) from my previous answer.