I'm trying to dissect a custom protocol that encapsulates on the wire protocols into udp.
So, in the simple case, I could call the ethernet dissector like this: eth_handle = find_dissector("eth"); /* Dissect as Ethernet */ next_client = tvb_new_subset(tvb, 0, -1, -1); call_dissector(eth_handle, next_client, pinfo, bsn_tree); But, my problem is, that *all* protocols are encapsulated. So, after I decapsulate it, I need to check the ethertype, as in packet-ethertype.c. But, there doesn't seem to be a simple way to do it . . . any ideas? Also, since this is a propriatary protocol, should I be writing a plugin instead of a normal dissector? I guess that would make more since . . . it'd be easier than maintaining a patch. -Dave -- David Frascone Oxymoron: Real Magic.