This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to use whole wireshark dissection code as library plugin ?

0

Hi,

I am using one accounting software which captures network data from libpcap.

I want to dissect all protocols available in wireshark dissection code. Also, I want to use wireshark services like Statistics.

Is there any way to use whole wireshark as a library (.so) and plug it into my software which is written in C ?

e.g. My software captures data from libpcap. I am using wireshark APIs to classify protocol stream and building statistics accordingly.

I am working on Ubuntu machine.

asked 26 Jun '16, 22:51

Mehul28's gravatar image

Mehul28
0458
accept rate: 0%

edited 26 Jun '16, 22:52


One Answer:

1

There is libwireshark which contains the dissection functions. The statistics related to the UI, the CLI interface has text output, while the Qt interface has nice graphics.

In all fairness, all these are considered internal interfaces within Wireshark / Tshark, and not really documented / supported for external program development.

The use of these functions this way will make GPL applicable to your application, having implications on the conditions for distribution.

answered 27 Jun '16, 02:23

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%