Wireshark-dev: Re: [Wireshark-dev] Enabling protocol in Decode As dialog
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Robert Cragie <robert.cragie@xxxxxxxxx>
Date: Fri, 10 Jun 2016 10:28:36 +0100
It doesn't run on top of UDP in the conventional sense but practically and for the purposes of this discussion, yes it does. Thanks for your help - just what I needed.

Robert

On 9 June 2016 at 08:54, Guy Harris <guy@xxxxxxxxxxxx> wrote:
On Jun 8, 2016, at 11:10 PM, Robert Cragie <robert.cragie@xxxxxxxxxxxxx> wrote:

> It's basically an 802.15.4 MAC frame plus an additional byte at the beginning placed into the payload of a UDP datagram.

So the answer to my question is "it runs atop UDP".

So:

        if there's a standard UDP port number atop which it runs, you should...

> The only thing the CoAP dissector does in addition is to add a port using dissector_add_uint()

        ...register it in the "udp.port" dissector with that port number;

        if there *is* no standard UDP port number atop which it runs, you should register it in the "udp.port" dissector with a call to dissector_add_for_decode_as().