Wireshark-dev: Re: [Wireshark-dev] why cannot I use heur_dissector_add("ip", .....
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sun, 26 Jun 2011 14:17:37 -0700
On Jun 26, 2011, at 2:09 PM, John x wrote:

> these packets run directly atop IP, any suggestions?

	1) Get a protocol number from the IANA and use it, instead of some hack based on the TTL value.

	2) Hack the IP dissector in a private version of Wireshark.