Wireshark · Wireshark-users: [Wireshark-users] Use of User DLT

[Mahesh K <mks_97@xxxxxxxxxxx>]

Folks,

I would like to use Wireshark to decode  non-network data. To do this, I have created a wireshark plugin. Here are some snippets of the plugin:

void proto_register_ldm(void)
{
   module_t *module;
   if (proto_ldm == -1)
   {
      proto_ldm = proto_register_protocol (
         "Ldm Protocol", /* name */
         "LDM",      /* short name */
         "ldm"          /* abbrev */
      );

 ...
}

void proto_reg_handoff_ldm(void)
{
 ...

ldm_handle = create_dissector_handle(dissect_ldm, proto_ldm);
dissector_add(wtap_encap, WTAP_ENCAP_USER0, ldm_handle);

..}

I have also created a pcap file for the sample data I want to decode in the following manner:

od  -tx1 -v ldmData.bin | text2pcap -l 147 - ldmData.pcap

i.e. I am using DLT USER0 (to match up with plugin).

Now when I try to configure DLT User 0 in wireshark (Edit->Preferences->Protocols>DLT_USER->Edit Encapsulations Table 
and adding an entry to decode DLT 147 using the "ldm" plugin)

I get the following error "No such proto:ldm". Now I do see that the ldm dissector is successfully registered.

Any ideas on what is the issue here? Thanks,

--Mahesh

---

NEW mobile Hotmail. Optimized for YOUR phone. Click here.