Re: [Wireshark-dev] Ethernet dissector

2021-05-23 Thread Guy Harris
On May 23, 2021, at 8:58 AM, Antonello Tartamo wrote: > The problem is that I don't have a predefined ether type as the ether type > field is used as length field. So the frames start with: a 6-octet Ethernet destination address; a 6-octet Ethernet source address; a

Re: [Wireshark-dev] Ethernet dissector

2021-05-23 Thread John Thacker
On Sun, May 23, 2021 at 1:10 PM Antonello Tartamo < antonellotart...@gmail.com> wrote: > I manually added the MAC addresses using proto_tree_add_ether(). > I thought there was a better way. > Thanks in advance > Regards > Antonello > If the MAC addresses are just present in the normal way like an

Re: [Wireshark-dev] Ethernet dissector

2021-05-23 Thread Antonello Tartamo
I manually added the MAC addresses using proto_tree_add_ether(). I thought there was a better way. Thanks in advance Regards Antonello Il giorno dom 23 mag 2021 alle ore 18:33 John Thacker ha scritto: > On Sun, May 23, 2021 at 12:18 PM John Thacker > wrote: > >> On Sun, May 23, 2021 at 11:59 AM

Re: [Wireshark-dev] Ethernet dissector

2021-05-23 Thread John Thacker
On Sun, May 23, 2021 at 12:18 PM John Thacker wrote: > On Sun, May 23, 2021 at 11:59 AM Antonello Tartamo < > antonellotart...@gmail.com> wrote: > >> The problem is that I don't have a predefined ether type as the ether >> type field is used as length field. >> Is there any other way to reuse the

Re: [Wireshark-dev] Ethernet dissector

2021-05-23 Thread John Thacker
On Sun, May 23, 2021 at 11:59 AM Antonello Tartamo < antonellotart...@gmail.com> wrote: > The problem is that I don't have a predefined ether type as the ether type > field is used as length field. > Is there any other way to reuse the ethernet dissector ? > Thanks in advance > So if I understand

Re: [Wireshark-dev] Ethernet dissector

2021-05-23 Thread Antonello Tartamo
The problem is that I don't have a predefined ether type as the ether type field is used as length field. Is there any other way to reuse the ethernet dissector ? Thanks in advance Il giorno dom 23 mag 2021 alle ore 16:12 Richard Sharpe < realrichardsha...@gmail.com> ha scritto: > On Sun, May 23

Re: [Wireshark-dev] Ethernet dissector

2021-05-23 Thread Richard Sharpe
On Sun, May 23, 2021 at 5:06 AM Antonello Tartamo wrote: > > Hello everyone, > I'm trying to create an ethernet dissector for a custom protocol working on > L2. > > In proto_reg_handoff_myproto() function I've called: > heur_dissector_add("eth", dissect_myproto, "MyProtocol", "mp", proto_mp, > H

Re: [Wireshark-dev] Ethernet dissector

2021-05-23 Thread John Thacker
On Sun, May 23, 2021 at 8:06 AM Antonello Tartamo < antonellotart...@gmail.com> wrote: > Hello everyone, > I'm trying to create an ethernet dissector for a custom protocol working > on L2. > > In proto_reg_handoff_myproto() function I've called: > heur_dissector_add("eth", dissect_myproto, "MyProt

[Wireshark-dev] Ethernet dissector

2021-05-23 Thread Antonello Tartamo
Hello everyone, I'm trying to create an ethernet dissector for a custom protocol working on L2. In proto_reg_handoff_myproto() function I've called: heur_dissector_add("eth", dissect_myproto, "MyProtocol", "mp", proto_mp, HEURISTIC_ENABLE); eth_handle = find_dissector("eth_withoutfcs"); then in t

Re: [Wireshark-dev] Ethernet dissector in Lua

2015-11-08 Thread Guy Harris
On Nov 8, 2015, at 8:33 AM, Edgar Petrov wrote: > I am writing a dissector in Lua and I want to dissect ethernet packets where > the EtherType field is actually the length (0 - 1500) and not a > recognized/registered EtherType. According to IEEE 802.3, the 2 octet field following the destinat

[Wireshark-dev] Ethernet dissector in Lua

2015-11-08 Thread Edgar Petrov
Hi, I am writing a dissector in Lua and I want to dissect ethernet packets where the EtherType field is actually the length (0 - 1500) and not a recognized/registered EtherType. How can I accomplish this? Thanks, Edgar _