EdgeShark - include ANYsec packet dissectors in the integrated Wireshark

[tiago-amado]

Wireshark does not decode ANYsec packets, for that packet dissectors are required.
These plugins available here: https://github.com/xavixava/anysec-dissectors.
Hopefully its just copy the 3 dissectors files to the wireshark plugin folder.

The output below compares the wireshark without and with dissectors:

[kaelemc]

Noted, this will need to be added to https://github.com/kaelemc/wireshark-vnc-docker

You can PR this yourself, otherwise it may take some time for one of us to get the cycles to do it :) and test it.

[tiago-amado]

Thanks. Yes I can do it within a few weeks, or try at least.
Just need some guidance on how to do it. Guess I need to copy the files to the Wireshark plugin dir during build and then test the new docker image.
If you could provide some high level steps, and whenever possible I'll dig into it.

[kaelemc]

Yes you are correct,

What i would do is maybe in the github action (or Dockerfile) you can clone the dissector repo, and then in the Dockerfile just use COPY directive to copy it into the correct directory (and ensure perms are correct).

Let me know if you need more info.