Wireshark · Wireshark-dev: Re: [Wireshark-dev] Looking for a definition document matching a dissector/plugin.

[John <heimdal@xxxxxxxxxxx>]

Luis Ontanon wrote:

> Simple dissector:
>   packet-udp.[ch] implements RFC 768
>
> Somewhat complex dissector:
>  packet-sctp.[ch] implements RFC 2960 and others
>
> Very complex dissector:
>  packet-xml.[ch] impelements (parts of) http://www.w3.org/XML/
>
> as a rule of thumb most dissectors can be found in epan/dissectors and
> should have a pointer to the specs they implement.
>
>
> On 3/22/07, John <heimdal@xxxxxxxxxxx> wrote:
>  
>
> > Hello,
> >
> > I have read much of the wireshark documents on how to program a
> > dissector/plugin for a new packet protocol. Does anyone have a suggested
> > packet type, that has a public protocol document, for an already defined
> > dissector/plugin? This would help me to comprehend the remaining arcanum
> > in writing a dissector plugin for a new packet protocol type. Any
> > suggestions would be greatly appreciated.
> >
> > Cheers,
> >
> > John
> > _______________________________________________
> > Wireshark-dev mailing list
> > Wireshark-dev@xxxxxxxxxxxxx
> > http://www.wireshark.org/mailman/listinfo/wireshark-dev
> >
> >    
>
>
>  
Thanks!