THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Custom Dissector Plugin not found after place it in Personal Plugins folder

I have compiled a dissector plugin following this guide. If I place the resulting '*.dll' in:

C:\Program Files\Wireshark\plugins\4.0\epan

My plugin is found and it works as expected. But, as it is a custom plugin, I have considered that it should be placed in Personal Plugins folder:

C:\Users\%user%\AppData\Roaming\Wireshark\plugins\4.0:

Doing so, it seems dissector is not found:

Error loading table 'User DLTs Table': user_dlts:2: dissector not found

Am I missing someting? Is there anything wrong on WireShark custom plugins awareness?

Many thanks!

Selrac's avatar
1
Selrac
asked 2023-10-09 23:28:15 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Enhancement to simplify the plugin directory structure:
12528: plugins: Do not require a "type" subfolder hierarchy

Chuckc's avatar Chuckc (2023-10-11 13:06:43 +0000) edit
add a comment see more comments

1 Answer

0

Have you tried adding the epan level under plugins\4.0 and placing the plugin there?

B.4. Plugin folders

Wireshark looks for plugins in both a personal plugin folder and a global plugin folder. Lua plugins are stored in the plugin folders; compiled plugins are stored in subfolders of the plugin folders, with the subfolder name being the Wireshark minor version number (X.Y). There is another hierarchical level for each Wireshark plugin type (libwireshark, libwiretap and codecs). So for example the location for a libwireshark plugin foo.so (foo.dll on Windows) would be PLUGINDIR/X.Y/epan (libwireshark used to be called libepan; the other folder names are codecs and wiretap).

Chuckc's avatar
3k
Chuckc
answered 2023-10-10 00:59:30 +0000, updated 2023-10-10 01:00:20 +0000
edit flag offensive 0 remove flag delete link

Comments

Thanks @Chuckc. Indeed, I was missing the "epan" folder inside Personal Plugins. Now it works, Many thanks

Selrac's avatar Selrac (2023-10-10 08:39:28 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer