Wireshark-dev: [Wireshark-dev] [HELP]How to dissect a packet without a protocol? It can only be
From: yenan <yen1505@xxxxxxxxxxx>
Date: Thu, 21 Feb 2008 01:00:16 +0000
Hi folks:
Im writing a plugin for a packet store in the payload of standard "802.1Q Virtual LAN" packet ,this packet does not have protocol itself, it can only be digged by its Dst Mac address or Vlan Id, how could I dissect such a packet?
I tried to use :
register_dissector_table() in  vlan.c to create dissector table for "vlan.id", and in the plugin I used dissector_add() tring to call the dissector, but wont work! so , should I also use : dissector_try_port(), what should I pass in these functions ?
Any information I can read and leanrn for these functions?
 
And last question, if I try to dig out the packet by its dst mac address, what should I do? I find out the address are in FT_ETHER type, how can I handle such types?
 
I went through readme.develper couple times, still know very little for wireshark, are there anymore documents will explain the functions and structure in more detail?
 
 
Really need help!Thanks millions!Any information will be greatly appreciated!
 
 
Nan


Windows Live Writer,支持离线撰写博客内容,随时随地想写就写。 立即使用!