This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hello, I would like to know about the below things.

  1. Please let me know can I add a custom protocol (in the application layer) as a plugin?
  2. Can we write our own plugin (add new features for ex: display statistics information ) and integrate this into wireshark ?

Thank you.

asked 18 Aug '16, 02:03

stadkama's gravatar image

stadkama
11226
accept rate: 0%


Yes and yes. See the Developers Guide which mainly discusses building dissectors using C, but you can also do this using Lua. There is also the doc directory in the source tree with the particular files README.dissector and README.plugins that may be of interest.

Note that Wireshark is licenced under the GPL, so if you distribute your plugin outside your company you must make the source code for the plugin available.

permanent link

answered 18 Aug '16, 05:16

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

Thank you. can we make GUI changes also like adding a menu item which has some features?

(01 Sep '16, 04:25) stadkama

Did you look at README.plugins, Sect. 6 discusses GUI options for plugins?

There's also the Lua equivalent here.

(01 Sep '16, 04:36) grahamb ♦

I went through it...If I am not wrong it is done using Qt right?

(13 Sep '16, 01:47) stadkama

If using C (or C++ actually), then yes you are directly using Qt. If using Lua, then you are limited to the Wireshark Lua API.

(13 Sep '16, 04:24) grahamb ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×173

question asked: 18 Aug '16, 02:03

question was seen: 1,160 times

last updated: 13 Sep '16, 04:24

p​o​w​e​r​e​d by O​S​Q​A