On Sun, Feb 23, 2014 at 7:44 AM, 我想不无聊 <237825...@qq.com> wrote: > after get and dissect a packet,how to display this packet in the > packet_view?by call which function in which file?
While I admire your persistence in asking questions, all of this can be understood by reading doc/README.dissector and one of the simpler dissectors at the same time. Perhaps you should read the source code for epan/dissectors/packet-tftp.c. The only real complexity there is that we create a conversation in interesting ways because the port number pair changes on the first reply compared with the first request. -- Regards, Richard Sharpe (何以解憂?唯有杜康。--曹操) ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe