Ethereal-dev: [Ethereal-dev] question about developing a transparent dissector

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Javier V.V." <habier@xxxxxxxxx>
Date: Tue, 20 Dec 2005 09:58:53 +0100
hi all,

im developing a basic dissector. I have coded the basic skeleton
(based on the dissector foo from the documentation).

I would like to be called for any packet ip or arp being analyzed but
i have a problem with this. I add this conditions for my dissector was
called:

foo_handle = create_dissector_handle(dissect_foo, proto_foo);
dissector_add("ethertype", 0x0800, foo_handle);
dissector_add("ethertype", 0x0806, foo_handle);

So my dissect_foo function is called for any ip or arp. Then i analyze
the packed with the given info and modify things if i want etc... but
when i finish the job i would like the packet continued being analyzed
by other dissectors and protocol analyzers. In the manner that i work
the packet doesnt continue being analyzed and it appears as "ethern"
protocolo only, in the UI.

Could you help me please? I was seeing the documentation and i have no
solution.

In the other hand i observe that my dissect_foo function is not called
with a tree != NULL i dont know why. I need to do anything for being
called with the tree?

Thanks in advance.
Regards.