

It is the combination of wireshark and other tools that might get you in trouble. Any data transmitted to you is already transmitted to you. I have this file in >C:\Development\wireshark\plugins\temp folder, since i'm writing it as a plugin. Depends on what you mean with Public Network Wireshark only listens onto a device you already have access to, such as your network cards interface. Temp_handle = create_dissector_handle(dissect_temp, proto_temp) ĭissector_add_uint("ip.proto", IP_PROTO_TEMP, temp_handle) Static void dissect_temp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)Ĭol_set_str(pinfo->cinfo, COL_PROTOCOL, "TEMP") My packet-temp.c file contains : #include "config.h" What are all the steps needed to do, so that the IP dissector will pass the payload to my protocol ?

Let's say the protocol number is " 254 ". I'm developing a dissector/protocol as a plugin above Network layer so that The IP dissector will dissect all the IP headers and will look at the "protocol" field to pass the payload to my protocol.
