History

Michal Privoznik ec91064169 wireshark: Adapt to tvb_new_subset() rename In Wireshark commit of 7cd6906056922e4b8 (contained in v2.4.0) the tvb_new_subset() function was renamed to tvb_new_subset_length_caplen(). However, we can take the extra step and rename to tvb_new_subset_remaining() directly (see Wireshark commit 0ecfc7280cf3d7). The reasoning is that there is no other protocol in the packet than libvirt. Therefore, from the point that libvirt dissector takes over till the end of the packet it's all libvirt packet. Signed-off-by: Michal Privoznik <mprivozn@redhat.com> Reviewed-by: Martin Kletzander <mkletzan@redhat.com>		2017-07-18 15:37:38 +02:00
..
samples	Fix common misspellings	2015-03-23 09:01:30 +01:00
src	wireshark: Adapt to tvb_new_subset() rename	2017-07-18 15:37:38 +02:00
util	wireshark: s/proto_tree_add_text/proto_tree_add_item/	2016-01-11 17:23:41 +01:00
README.md	Introduce Libvirt Wireshark dissector	2014-01-20 17:09:41 +01:00

README.md

About

This is the project of Google Summer of Code 2013 accepted by QEMU.org and libvirt community. The goal of this project is, provide Wireshark dissector for Libvirt RPC protocol. It will provide Libvirt packet overview/detail analysing in Wireshark. Furthermore, it will be able to build(generated) from RPC protocol definition placed in Libvirt source tree to support latest protocol specification.

Installation

Run ./configure with --with-wireshark-dissector option enabled. Then dissector will compiled with libvirt itself.

Add/Remove protocol from dissector's support

Modify variable WS_DISSECTOR_PROTO_FILES in tools/wireshark/src/Makefile.am.

Changing installation directory

You can change installation directory of pluggable shared object(libvirt.so) by specifying --with-ws-plugindir=.

You can install libvirt.so into your local wireshark plugin directory:

./configure --with-wireshark-dissector \
    --with-ws-plugindir=$HOME/.wireshark/plugins