Hi,
I was wondering what you do if your sub-dissector (tcp and udp) is using a port
defined by another dissector. In this case we are using ports 5060
(also used by packet-sip.c) and 5050 (also used by packet-yhoo.c).
This new protocol is used on a flight test airplane for data acquisition, so
it is unlikely to ever be used by anyone else. I suppose I could have them
change the use of these ports, but I was wondering if there was a way to
"remove" the other protocols. I suppose I could just not build them in, but was
looking for a more elegant solution.
Another question that shows my ignorance.......
Embedded in these packets is a SYNC pattern (following is a header).
Packet Exchange Protocol (PEP)
SYNC Pattern: 0xd00bed00
Message Type: GET_DB_RECORD_ID_RSPREQUIRED - Get Database Record ID (request) (0x00000471)
Message Length (bytes): 184
It is the very first thing after the TCP or UDP header. Is there a way to use this sync pattern instead of the port
to identify this packet as being associated with this dissector.
Thanks for your time