This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Working dissector for 1.7.1 not working for 1.9.0

0

Hi Experts,

I don't know what changes wireshark underwent which has rendered my plugin useless in 1.9.0. I am not getting any compiler/install error but still my plugin is not working and i suspect it has to do with some recent changes of wireshark.

One of the few new changes i did was to add "void* data_U_" in dissector function arguments and post this change atleast i am not getting install error. I know it's a bit too much but if possible please take a quick look at my dissector code and let me know if you find any obvious fault.

http://pastie.org/private/rf8jkdq7ewjumh0ehoydw

asked 05 Mar '13, 00:06

yogeshg's gravatar image

yogeshg
41222326
accept rate: 0%


One Answer:

0

You're in conflict with the IPv4/IPv6 dissector, registering for the same Ethertypes. This time you lost.

answered 05 Mar '13, 05:44

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

edited 05 Mar '13, 23:03

Thank you Jaap for your reply. I wish to check all ipv4 and ipv6 packets for my protocol that's why i did that. Is there any workaround for this ?

(05 Mar '13, 21:21) yogeshg

You seem to be doing trailer dissection. There's a table for that, called eth.trailer called in packet-eth.c. Have a look there to see if you can hook in there.

(05 Mar '13, 23:13) Jaap ♦

Can you please point an example dissector using eth.trailer ?

(10 Mar '13, 23:29) yogeshg

Just grep eth.trailer epan/dissectors/packet*.c

(10 Mar '13, 23:40) Jaap ♦