I wanted to know if the custom dissector which users have written under /plugin/ directory and created a .so for the same are loaded during run time or initialization time ? I mean the .so files loaded under /usr/lib64/wireshark/plugins/1.12.7/ directory. asked 25 May '16, 08:02  Kiran Kumar G |
2 Answers:
There's little difference between the two, but at a stretch one could say initialization time. The plugins are loaded as glib modules, and this is happening in answered 25 May '16, 10:02  Jaap ♦ |
They're not linked in, they're loaded by calls Wireshark makes, so in that sense they're loaded at run time. The part of run time when they're loaded is during the startup process of Wireshark, not while Wireshark is actually dissecting packets, so, for example, they're not loaded "on-demand". answered 25 May '16, 15:30  Guy Harris ♦♦ |
glib modules means -- libglib-2.0.so.0 ?
No, "the plugins are loaded as glib modules" means "the plugins are loaded using the g_module APIs". Those APIs are wrappers around the OS's dynamic loading APIs, such as
dlopen()/dlsym()on most UN*Xes,LoadLibrary()/GetProcAddress()on Windows, or whatever the laggard UN*Xes such as 32-bit HP-UX use.