This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to add a custom token-ring packet dissector

0

I want build a dissector, the packet first 32 bytes is:

0000: 55 55 00 26 db 00 11 00 00 00 07 00 22 00 00 00 
0010: 08 51 00 00 26 02 00 45 00 01 ee 00 00 00 00 40
when i used follow code, it can work for ethernet packet, but not work for this packet.

heur_dissector_add("eth", dissect_myprotocol, proto_myprotocol);

I want used like this, but it wrong:

heur_dissector_add("tr", dissect_myprotocol, proto_myprotocol);

Some body can tell me which parent id should i use?

asked 22 Sep '11, 00:21

zhoushuming's gravatar image

zhoushuming
1111
accept rate: 0%

edited 22 Sep '11, 06:09

Jaap's gravatar image

Jaap ♦
11.7k16101


One Answer:

0

There is no heuristic subdissector table defined for tr, as opposed to eth.

answered 22 Sep '11, 06:13

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%