Ethereal-dev: Re: [Ethereal-dev] Dissection Process

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 01 Feb 2006 10:20:14 -0800
Jasim Tariq wrote:

Does ethereal dissect a protocol only while doing a live capture?
No. It dissects protocols the same way for live captures and saved captures.
I am loading an old capture file and trying to observe a protocol under the TCP Protocol. I have defined a TCP port number in the sourse code of my dissector but when I load the previously captured file, Im still not able to see the protocol relating to that TCP port. 

You did register your dissector with that TCP port number with a
dissector_add("tcp.port", {the port number}, {the handle for your dissector); 

call, right?

If not, that port won't be recognized as being for your protocol.