Using of Protocol Interpreter Development Kit

[Indyana]

Hi,

I have to use Protocol Interpreter Development Kit to create my own protocol but i have a problem... The Sniffer doesn't recognize my protocol, i have just this error :
"Load PPI decode engine failed"

My protocol compiles good so i'm stopped now... i don't find the solution...

If someone has already created a own protocol with PDK, can he help me ??

Sorry for the english, i'm french, i hope you understand my problem..

Thanks

 

[cpete]

Did you copy the "pds" file to the program directory of Sniffer? What version are you using? 3.5 or 4.5?

Chris

 

[Indyana]

Yes i copied les "pds" file to the program directory of Sniffer. I use the 4.5.
But i think there is a problem in my "pds" file. the problem is i don't know where and i have no example of good "pds" file. I would like to understand how Sniffer choose the good protocol to use ??

Has someone a example of good "pds" file ? just to know how to do ? the pdk_manual is very poor to explain how to do a good "pds" file...

Thanks
Francois

 

[Indyana]

If you have some examples of protocol...
my email is :
derecourt@hotmail.com

thanks a lot

 

[cpete]

I got your pds file and project file's. Nothing jumps out immediately, but I will take a closer look later. Any pds file in the Sniffer program directory is a "good" pds file. Check your e-mail for an example decode - it's a very simple example that works.

Chris

 

[billwelch]

I am also having trouble making my decoder work. It compiles and links fine, and I even hit breakpoints in my registration routine SnifferInitPi(). But no matter what I do, my decode entry point is never called, so I suspect a registration problem. (I am testing with a .cap file that contains traces from my application)

I am trying to decode an application level protocol over UDP using port 7600. My registration calls are:

RegRegister(
hRegInfo,
PROTO_SUITE_USER,
PROTO_SUITE_USER+40,
interp_my_protocol,
"My UDP protocol",
L7,
"My_UDP",
NULL);

RegBind(
hRegInfo,
PROTO_UDP,
PROTO_SUITE_USER+40,
"Port",
BIND_FLAGS_PORT,
(ULONG)7600);

Any help, or a example decoder that works would be greatly appreciated (billcwelch@hotmail.com)
Thanks - Bill