Wireshark · Wireshark-dev: [Wireshark-dev] Plugin Dissector vs Builtin Dissector

[Kevin Cox <kevincox@xxxxxxxxxxx>]

Hello,

Forgive me if this has been asked before but I can't find any resources
about the advantages/disadvantages of plugin dissectors and the ideal
cases for each.

So far I have gathered that plugin dissectors are "easiest to write
initially"[0] while builtin dissectors load slightly faster.

[0] https://www.wireshark.org/docs/wsdg_html_chunked/ChDissectAdd.html

I have read the README.{developer,dissector,plugin} and a number of
others but can't find a resource to help me decide which to write.

For the curious I will be working on a dissector for the Ceph[1]
protocol as a gsoc project this summer and am trying to make the
decision whether a builtin or plugin dissector would be preferred.

[1] https://ceph.com/

Cheers,
Kevin

Attachment: signature.asc
Description: OpenPGP digital signature