On Apr 24, 2009, at 6:53 AM, Armin Zimmermann wrote:
> But there is another question: How can I check whether it is a UDP-
> package or a TCP-package? Is there something like ip.proto==0x06 ?
If you do
heur_dissector_add("udp", dissect_red_udp, proto_red);
heur_dissector_add("tcp", dissect_red_tcp, proto_red);
then dissect_red_udp() knows it's been passed the payload of a UDP
packet and dissect_red_tcp() knows it's been passed a TCP segment.
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <[email protected]>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:[email protected]?subject=unsubscribe
