ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] is it possible to replace Source Destination columns with my own

From: "Daniel Roman" <danielson80@xxxxxxxxx>
Date: Tue, 6 Nov 2007 10:58:44 -0500
Hello:

I'm writing a dissector for a protocol which lies under the IP
protocol. Therefore the protocol stack looks like,
Ethernet->IP->myProtocol.
The protocol I'm trying to dissect has it's own Source and Destination
values different thant the ones the IP header provides. I would like
to ignore the Source and Destination that the IP protocol provides to
wireshark, so that when I run the Flow Graph option under the
statistics menu I could observe my protocols source and destination
values instead of the IP protocol's source/dest.

I was succesfull on writing to the Info column, but I haven't found a
way to write to the Source and Destination column.

Ideally I would like to ignore the IP dissector stuff and let my
dissector populate the appropiate columns with its own Source and
Destination values, etc.

Is this possible?

Thank you,

Dan