Wireshark · Wireshark-dev: Re: [Wireshark-dev] How to create TVB to pass to dissector

[Anders Broman <anders.broman@xxxxxxxxxxxx>]

Hi,

I don't think you should modify the packet but find a way to call the H.225 dissector directly, at a glance this seems to be done already

for some case:

Line 2895 call_dissector(h225_handle...

 

Regards

Anders

---

From: wireshark-dev-bounces@xxxxxxxxxxxxx [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Alex Lindberg
Sent: den 11 maj 2011 23:14
To: wireshark-dev@xxxxxxxxxxxxx
Subject: [Wireshark-dev] How to create TVB to pass to dissector

I need to dissect a H225 TCP message included in a q.931 packet.  However there is NO tpkt header in the message as expected by the q.931 dissector.  Thus the H225 part of the packet is not dissected.

How can this be resolved?  Could I build a tpkt header, insert it into the tvb (or create a new one)?  If so, how?

As always, your advise is much appreciated.

Thanks as always.
Alex Lindberg