Wireshark · Wireshark-dev: Re: [Wireshark-dev] Looking for a definition document matching a dissector/plugin.

["Luis Ontanon" <luis.ontanon@xxxxxxxxx>]

Simple dissector:
  packet-udp.[ch] implements RFC 768

Somewhat complex dissector:
 packet-sctp.[ch] implements RFC 2960 and others

Very complex dissector:
 packet-xml.[ch] impelements (parts of) http://www.w3.org/XML/

as a rule of thumb most dissectors can be found in epan/dissectors and
should have a pointer to the specs they implement.


On 3/22/07, John <heimdal@xxxxxxxxxxx> wrote:
> Hello,
>
> I have read much of the wireshark documents on how to program a
> dissector/plugin for a new packet protocol. Does anyone have a suggested
> packet type, that has a public protocol document, for an already defined
> dissector/plugin? This would help me to comprehend the remaining arcanum
> in writing a dissector plugin for a new packet protocol type. Any
> suggestions would be greatly appreciated.
>
> Cheers,
>
> John
> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-dev


--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan