Apply protocol when start frame is recognized

startofframe
dissector
filter
retag add tags

Hello everybody!

I made a dissector in lua for a custom protocol. I can apply my dissector when it recognizes the port it is registered to.

Now I have a PCAP trace file with only the no., timestamp, length and data.

The data always starts with a specific hex byte ("0x2F"). How can I apply my dissector on this data? Is there a way to let it recognize this specific start frame?

Kind regards, Tom

tom_titled

asked 2021-03-02 15:12:08 +0000

edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

Be the first one to answer this question!

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Apply protocol when start frame is recognized edit

Comments

Be the first one to answer this question!

Apply protocol when start frame is recognized