Re: why cannot I use heur_dissector_add("ip", .....

[Guy Harris <guy () alum mit edu>]

On Jun 25, 2011, at 11:45 PM, John x wrote:

> but here I want to use ip.ttl to instruct wireshark to handoff packet to my dissector.

Why?  The TTL value changes in-flight, so it cannot be meaningfully used to distinguish what protocol is being carried 
in an IP packet.

> In my specific situation, ip.ttl is my only way to distinguish my packets.

What is your specific situation?  What is it you're trying to do?
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe