Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: [Wireshark-dev] is it possible to replace Source Destination columns with my own's protocol Destination and Source values?

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Daniel Roman" <danielson80@xxxxxxxxx>
Date: Tue, 6 Nov 2007 10:58:44 -0500

Hello:

I'm writing a dissector for a protocol which lies under the IP
protocol. Therefore the protocol stack looks like,
Ethernet->IP->myProtocol.
The protocol I'm trying to dissect has it's own Source and Destination
values different thant the ones the IP header provides. I would like
to ignore the Source and Destination that the IP protocol provides to
wireshark, so that when I run the Flow Graph option under the
statistics menu I could observe my protocols source and destination
values instead of the IP protocol's source/dest.

I was succesfull on writing to the Info column, but I haven't found a
way to write to the Source and Destination column.

Ideally I would like to ignore the IP dissector stuff and let my
dissector populate the appropiate columns with its own Source and
Destination values, etc.

Is this possible?

Thank you,

Dan

  • Follow-Ups:
    • Re: [Wireshark-dev] is it possible to replace Source Destination columns with my own's protocol Destination and Source values?
      • From: Abhik Sarkar
  • Prev by Date: [Wireshark-dev] New Dissector: LLRP
  • Next by Date: Re: [Wireshark-dev] is it possible to replace Source Destination columns with my own's protocol Destination and Source values?
  • Previous by thread: [Wireshark-dev] New Dissector: LLRP
  • Next by thread: Re: [Wireshark-dev] is it possible to replace Source Destination columns with my own's protocol Destination and Source values?
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation