Implementing Deregister

Network Monitor passes all the frames of a capture to the parsers, and then starts calling the Deregister function for all the protocols it identifies. Each parser DLL must implement a Deregister function for each protocol that the parser DLL supports.

Each implementation of the Deregister function must call the DestroyProtocolDatabase function to release the resources that are used to create the database.

The following procedure identifies the one step necessary to implement Deregister.

To implement Deregister for one protocol

• Call DestroyProtocolDatabase to release the database resources.

The following code example identifies a basic implementation of Deregister. Note that the code example shows the release of resources that are used to create a property database.

VOID WINAPI MyProtocolDeregister (HPROTOCOL hProtocol)
{
  DestroyPropertyDatabase (hProtocol);
}