Your dissector Create packet-xxx.c in top level directory Copy an existing dissector and modify eg, packet-pop.c not a good choice if you need to keep state between packets Must have a dissect_xxx entry point Use build-dissector.pl to build a TCP/UDP dissector Can decode as much or as little as you want