Wireshark-dev: [Wireshark-dev] is it possible to replace Source Destination columns with my own
From: "Daniel Roman" <[email protected]>
Date: Tue, 6 Nov 2007 10:58:44 -0500

I'm writing a dissector for a protocol which lies under the IP
protocol. Therefore the protocol stack looks like,
The protocol I'm trying to dissect has it's own Source and Destination
values different thant the ones the IP header provides. I would like
to ignore the Source and Destination that the IP protocol provides to
wireshark, so that when I run the Flow Graph option under the
statistics menu I could observe my protocols source and destination
values instead of the IP protocol's source/dest.

I was succesfull on writing to the Info column, but I haven't found a
way to write to the Source and Destination column.

Ideally I would like to ignore the IP dissector stuff and let my
dissector populate the appropiate columns with its own Source and
Destination values, etc.

Is this possible?

Thank you,