This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

how to use the two function: heur_dissect_XX() and heur_dissector_add()?

0

The two function just in the packet-umts-fp.c. The protocol is "fp".but i don't know how to use it. When I select a packet,then dissect as,there is no "fp" to select.why?

Hope the master give advice or comments please!

asked 14 Jun '12, 01:06

smilezuzu's gravatar image

smilezuzu
20323237
accept rate: 0%


One Answer:

0

Hi, Look in doc/README.heuristic to get some information on heuristics. if you want to register and UDP dissector to be able to use "decode as" use dissector_add_handle("udp.port", fp_handle); In this particular case that will probably do you no good as you need the fp_info struct (packet-umts_fp.h filled in and stored in per_packet_data for the FP dissector to be able to dissect the packet. It might be possible to designa heuristic to find FP packets making use of the CRC to at least dissect control signals, from there it might be possible to do more. regards Anders

answered 14 Jun '12, 05:17

Anders's gravatar image

Anders ♦
4.6k952
accept rate: 17%