I successfully wrote my first dissector (using Lua) for ethertype. I capture
packets on embedded Linux with tcpdump, and then analyze on my XP machine that
has
Wireshark installed with my .lua scripts.
I would like to use the same dissector for wireless capture so I added to the
wtap
protocol like this:
local wtapTable = DissectorTable.get("wtap_encap")
wtapTable :add(wtap.USER15,myProto)
When I open my wireless capture it shows as expected:
+ Frame 83: 72 bytes on wire ...
+ Radiotap Header vo, Length 23
+ IEEE 802.11 Data, Flags ...
+ Logical-Link Control
+ Data (17 bytes)
However, when I try to use "decode as" it is disabled.
I am obviously misunderstanding something. Or have not read the right part of
the
documentation. Any clarification, or pointers to what I *should* have read
would be much appreciated
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe
