Wireshark Generic Dissector


Download generic.dll (Windows) or generic.so (Linux) and put it into Global Plugins folder or Personal Plugins folder.
These folders are specified into Help / About Wireshark / Folders.

Put the following files into a directory.
example_with_capture.wsgd : protocol name, parent dissector ...
example_with_capture.fdesc : data format description

The directory could be :
- any directory if you set a environment variable : WIRESHARK_GENERIC_DISSECTOR_DIR = <directory where are example_... files>
- wireshark profiles directory (e.g. C:\Users\<user>\AppData\Roaming\Wireshark\profiles)
- wireshark data directory (e.g. C:\Users\<user>\Documents)
- wireshark plugin directory (e.g. C:\Program Files\Wireshark1.0.3\plugins\1.0.3)
- wireshark main directory (e.g. C:\Program Files\Wireshark1.0.3)


Posted on 27/10/2007 by UserName

Run wireshark using example_with_capture.pcap
Display example

Change PARENT_SUBFIELD and PARENT_SUBFIELD_VALUES (into *.wsgd) to test your data.
Add a new file xxx.wsgd (into the SAME directory) to define another protocol.

CSS Template by Rambling Soul