You could add a preference to your dissector to only perform detailed dissection for a specific frame, with the default frame number being 0 so that by default no detailed dissection is performed for any frame. Then you just need to compare
the frame number from the pinfo data with the frame number preference when deciding to perform detailed dissection or not.
Just another idea.
- Chris
- Chris
From: Wireshark-dev <wireshark-dev-bounces@xxxxxxxxxxxxx> on behalf of Sake Blok | SYN-bit <sake.blok@xxxxxxxxxx>
Sent: Tuesday, May 23, 2023 9:51:33 AM
To: Developer support list for Wireshark <wireshark-dev@xxxxxxxxxxxxx>
Subject: Re: [Wireshark-dev] Ability to dynamically dissect in more detail?
CAUTION: This email originated outside of IGT. Do not click links or open attachments unless you recognize the sender and know the content is safe.
I have a dissector. I dissect the content as delimited text. Sometimes the textual content has further meaning, but I only want to dissect it in further detail on a packet by packet basis and only if the user requests it on a specific packet.
The reason is that the detailed dissection requires extra information to be loaded and extra dissection processing. Is there any mechanism to expand a section only when requested? A trivial example:
One way to achieve this would be to use the C dissector only for the general dissection and then use a Lua script to create the detailed dissection. I'm not 100% sure, but I assume it would be possible to have it register itself under tools. I do not think
you can add extra fields this way, but it sounds like that might not be needed anyways, just a further detailed display of data in the packet.
Just an idea...
Cheers,
Sake
CONFIDENTIALITY NOTICE: This message is the property of International Game Technology PLC and/or its subsidiaries and may contain proprietary, confidential or trade secret information. This message is intended solely for the use of the addressee. If you are
not the intended recipient and have received this message in error, please delete this message from your system. Any unauthorized reading, distribution, copying, or other use of this message or its attachments is strictly prohibited.