Wireshark-dev: Re: [Wireshark-dev] Disectors & conversations
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Wed, 21 Jun 2006 17:59:15 +0200 (CEST)
Hi,

How about

      if (check_col(pinfo->cinfo, COL_PROTOCOL))
      {
        col_set_str(pinfo->cinfo, COL_PROTOCOL, "myProtocol" );
      }

Thanx,
Jaap

On Wed, 21 Jun 2006, Cook, Timothy wrote:

> We have written a new dissector for Wireshark.  Using the the
> README.developer (plus other dissector examples) made the creation very
> simple (thanks for the detailed info).
>
> My dissector hooks TCP port 1000.
>
> How can I hook TCP packets (SYN/FIN/RST/...) and change the Protocol
> column data to mimic the respective dissector.
>
> I want to be able to filter based on the protocol & get the whole
> conversation, including the channel open & close.
>
>
> -Tim
>