Hi,
If possible it's better to try to do that via hooks in the
existing dissector.
packet-gtp.c has a dissector table to dissect protocol
extension by vendor ID if the protocols extension mechanism is
used.
Regards
Anders
Dear Wireshark community,
Is it possible to have two dissectors for the same protocol, one built-in
and one as a plugin, with the plugin having a slightly different name that can
dissect additional (perhaps proprietary) information?
For example, without modifying the built-in GTP dissector, can I add a
GTP-Ericsson dissector as a plugin and disable the built-in GTP dissector by
modifying the disabled_protos file?
I have attempted this but found that I must modify libwireshark.def and
recompile in order for the plugin to find certain definitions.
Best regards,
David Wei