On Mar 28, 2007, at 2:28 PM, Bryan Miller wrote: > Guy, I am in agreement and that is what I anticipate doing with the > bulk of my > work. I this particular case the protocol is proprietary and will > likely not > become public until 2008.
So is this an extension to an existing protocol, or a completely new protocol? (A new ONC RPC-based protocol or a new DCE RPC-based protocol is a new protocol, not an extension to an existing protocol.) If it's a completely new protocol, there's no dissector already statically linked into Wireshark. If it's an extension to an existing protocol, you'll have to modify the existing dissector and build a private version of Wireshark for internal use. (Anybody outside your organization to whom you give the modified version can ask for the source, and you have to provide it to them, and they can then give the source away to anybody they want.) _______________________________________________ Wireshark-dev mailing list Wireshark-dev@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-dev