Hi,
I want to write a tester for my dissector. Since the procotol is complex it
is not sufficient, to load a captured file and verify visually the tree
output. I generated a set of synthetic capture files. Now the idea is to
instruct tshark to parse the file using the dissector and compare the output
with a predefined one.
To see my dissector's output I found only the -V option. This could be used
in that way:
tshark -V -r sample_file.pcap
Unfortunately I get the whole tree. I failed to specify that only my
dissector's output is reported.
How can I limit the output to one protocol level. As an example the TCP
level would be great (without IP, Ethernet, Frame)?
What other test concepts do you use?
--
Andy