Wireshark · Wireshark-dev: Re: [Wireshark-dev] Writing a new packet dissector

[Daniel Griscom <griscom@xxxxxxxxxxxx>]

At 10:46 AM +0200 10/14/06, Jaap Keuter wrote:
> Hi,
>
> Oke, here it goes: RTFM's at www.wireshark.org

Yes, I've already spent quite a while going over the user and 
developer documentation. I've also already downloaded and sniffed 
around the source. End result: little detailed enlightenment.

> Bit more to the point: What platform are you developing on? Wild guess
> Win32?

Well, I'm an OS X man by choice, but Wireshark is so much better 
integrated into Windows that I use it there.

> Then look into the Wireshark Developer Guide, which has the step by
> step guide of setting up the build environment. With all that in place
> check out doc/README.developer which contains lots of details on the
> internals.

Ah: that's the info I was looking for. Suggestion: add a pointer to 
the wireshark/doc directory to the very top of the developer's guide; 
less-experienced open-source developers (like myself) might not know 
to look there.

After a lot of grepping, I found the text-based media dissection code 
at epan/dissectors/packet-text-media.c. I'll start my work there.


Thanks,
Dan

--
Daniel T. Griscom             griscom@xxxxxxxxxxxx
Suitable Systems              http://www.suitable.com/
1 Centre Street, Suite 204    (781) 665-0053
Wakefield, MA  01880-2400