I want to write my own LINK_LAYER dissector, which using DLT_USER13. I tried to use function asked 07 Jul '17, 06:32  Nomad edited 08 Jul '17, 14:20  Lekensteyn |
One Answer:
The "name" is the name of the dissector table; for a pcap/pcapng link layer, the name would be Alternatively, you can make sure your dissector has a name, and edit the "Encapsulations Table" list for the preferences for the "DLT_USER" protocol, and put in an entry with "User 13" as the DLT, your protocol as the "Payload protocol", and 0 as the header and trailer lengths. answered 11 Jul '17, 19:16  Guy Harris ♦♦ edited 11 Jul '17, 22:46  sindy |
