Hi, I want to write a dissector for http request body when a certain header present in the request (for example protocol: my protocol). Can somebody give me direction of how to do that? Thanks asked 14 Feb '13, 14:24  seannguyen edited 15 Feb '13, 08:47  grahamb ♦ |
One Answer:
You can only do that if you register for a specific media-type, as defined through http.content-type. There's no other way to influence the HTTP dissector for body dissection than altering the HTTP dissector code itself. answered 14 Feb '13, 14:41  Jaap ♦ |
Can you show me how to do it with a specific media-type header? I am very new to wireshark dissector. Thanks