This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

two dissectors for the same protocol

0

hi, I want to know if it is possible to use two dissectors with the same protocol for different messages? These two messages are different but having the same protocol. so i am supposed to use the same dissector for both the messages or is it possible to create two different dissectors for the same protocol for two different messages??

thank you.

asked 03 Aug '15, 00:51

zombimind's gravatar image

zombimind
6337
accept rate: 0%


One Answer:

1

Just do as all the other dissectors for protocols that have more than one message type do, and just have one dissector for the protocol that somehow determines the type of the message (for example, by looking at a message type field if there is one) and dissects all the different types of messages.

answered 03 Aug '15, 01:03

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

thanks form your time harris,, so its not possible to have two dissectors for the same protocol..??

(03 Aug '15, 01:11) zombimind

No, it is not. As per my response, you don't need to have two dissectors for the same protocol, you just have one dissector that dissects all the messages for the protocol.

(03 Aug '15, 10:55) Guy Harris ♦♦

I got it , thanks..

(03 Aug '15, 23:16) zombimind