This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hello,

I am developping a custom dissector that shall compute the maximum delay between several pdu (e.g max delay between "keep alive" pdus).

To provide the "raw data" I add this kind of code :

foo_tap = register_tap("foo"); (in proto_registerxxx)

and

tap_queue_packet(foo_tap, pinfo, &foo_info); (after dissecting packet)

To use my dissector as the tap listener, I added this code :

register_tap_listener("foo", NULL, NULL, 0, foostat_reset, foostat_packet, foostat_draw); (in proto reg handoff)

I also added the three functions foostat_reset, foostat_packet and foostat_draw.

===

Now I have a few questions (I did not managed to find any example in the README.xxx):

  1. How can I display my metrics ?
  2. How can I keep all this code in the same dll ?
  3. foostat_packet is called only when my display filter contains foo. If I do not have a foo filter, it is not called, even if I receive a foo pdu. Is this normal ?

Thank you !

asked 13 May '16, 09:05

hpa's gravatar image

hpa
16448
accept rate: 0%

edited 13 May '16, 09:08


"I did not managed to find any example in the README.xxx"

Have you read doc/README.tapping?

permanent link

answered 19 Jul '16, 09:36

cmaynard's gravatar image

cmaynard ♦♦
9.3k1038142
accept rate: 20%

edited 19 Jul '16, 09:37

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×40
×2

question asked: 13 May '16, 09:05

question was seen: 1,068 times

last updated: 19 Jul '16, 09:37

p​o​w​e​r​e​d by O​S​Q​A