I wrote a dissector named for some reasons this dissector doesn't reassemble all of the protocol's packets which can be found as I uploaded the .pcap I'm using in order to debug my protocol here (I made this .pcap shorter, but it shows the same results on the original .pcap version, and on other .pcaps also) and the source of my protocol here (DOWNLOADING PASSWORD: "wireshark") My protocol format is:
I compiled it on wireshark version 1.8.4, using x64 compiler. "Setting environment for using Microsoft Visual Studio 2010 x64 cross tools" Compiling the dissector:
or for 64bit call "C:\Program Files (x86)\Microsoft Visual Studio 10.0\VC\vcvarsall.bat" x86_amd64
Any help will be very appreciated Thanks asked 02 Apr '13, 00:15 hudac edited 11 Apr '13, 02:24 |