问题描述
我有一个在Wireshark中正在查看的自定义协议.我认为，wireshark可以帮我剖析它，这样就不必解码十六进制了.尽管我是在程序日志中执行此操作的，但是wireshark会捕获与计时信息有关的整个对话，因此在此处会更加有用.
I have a custom protocol that I'm looking at in wireshark.I thought it'd be useful if wireshark could disect it for me so that I don't have to decode the hex. Although I'm doing this in my program logs, wireshark captures the whole conversation with timing info so it'd be more useful there.
这可以轻松完成吗?
推荐答案
这取决于您对轻松"的定义.这绝对是可行的-Wireshark对可插式解剖器有很好的支持.
It depends on your definition of "easily". It's definitely doable - Wireshark has great support for pluggable dissectors.
README.developer 显然是解剖器开发的最佳手册".看看，然后自己决定.
README.developer is apparently the "best manual" for dissector development. Take a look, and decide for yourself.
这篇关于如何向Wireshark添加自定义协议分析器?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！