如何向Wireshark添加自定义协议分析器? [英] How can I add a custom protocol analyzer to wireshark?

问题描述

我有一个在Wireshark中正在查看的自定义协议. 我认为，wireshark可以帮我剖析它，这样就不必解码十六进制了.尽管我是在程序日志中执行此操作的，但是wireshark会捕获与计时信息有关的整个对话，因此在此处会更加有用.

I have a custom protocol that I'm looking at in wireshark. I thought it'd be useful if wireshark could disect it for me so that I don't have to decode the hex. Although I'm doing this in my program logs, wireshark captures the whole conversation with timing info so it'd be more useful there.

这可以轻松完成吗?

推荐答案

这取决于您对轻松"的定义.这绝对是可行的-Wireshark对可插式解剖器有很好的支持.

It depends on your definition of "easily". It's definitely doable - Wireshark has great support for pluggable dissectors.

README.developer 显然是解剖器开发的最佳手册".看看，然后自己决定.

README.developer is apparently the "best manual" for dissector development. Take a look, and decide for yourself.

这篇关于如何向Wireshark添加自定义协议分析器?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！