This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

WireShark v0.99 was able to decode Sahara. Now in version 1.10, Sahara decoding is no longer available. Is there any way to decode Sahara with the new version?

asked 03 Jul '13, 05:17

viperfx15's gravatar image

viperfx15
1111
accept rate: 0%


I was not able to find a reference to the 'Sahara' protocol in the source code of Wireshark 0.99. Either it is not called 'Sahara' (spelling error) or you had a third-party plugin in Wireshark 0.99 with a 'Sahara' dissector.

Can you please add more details about that protocol?

UPDATE:

To answer your question:

Is there any way to decode Sahara with the new version?

As it's now clear that there is a custom dissector plugin (sahara.dll), you need to contact the author of the plugin and ask him/her to compile a version for you that is compatible with Wireshark 1.10.

Regards
Kurt

permanent link

answered 03 Jul '13, 06:28

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 03 Jul '13, 07:11

It seems that it is a dissector plugin. However, it is located in the Wireshark/plugins/0.99 folder (sahara.dll) so this would mean it is part of the standard plugins that came with the Wireshark setup package, right? In my new instalation, in the folder Wireshark/plugins/1.10 folder, this dll is not found anymore.

(03 Jul '13, 06:35) viperfx15

The plugin could have just been dropped\installed into that location and isn't part of the standard Wireshark distribution.

(03 Jul '13, 06:54) grahamb ♦

As google does not find anything about sahara.dll in conjunction with Wireshark, I assume it's some home-made dissector plugin that was not released publicly.

Can you please tell us more about the Sahara protocol?

(03 Jul '13, 07:07) Kurt Knochner ♦

However, it is located in the Wireshark/plugins/0.99 folder (sahara.dll) so this would mean it is part of the standard plugins that came with the Wireshark setup package, right?

No. We never distributed a "sahara" plugin; as grahamb notes, perhaps the plugin was installed separately and was put into the standard Wireshark plugin directory, or perhaps the 0.99 that you installed was a special distribution somebody other than wireshark.org provided, with the Sahara plugin included.

(03 Jul '13, 11:06) Guy Harris ♦♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×89
×1

question asked: 03 Jul '13, 05:17

question was seen: 3,434 times

last updated: 03 Jul '13, 11:06

p​o​w​e​r​e​d by O​S​Q​A