I'm trying to add a field for UDP data payload. So that I can use the strings to search for some information.
(Like for example, I can do udp.length==12345,
I want to add a payload field so that I can do something like "udp.payload contain something")
where abouts does the code for udp dissection situated?
How about something like this for a filter ??
(I think this will work)
udp && (data contains ...)
(I'm not sure but you might have to disable any protocols which ride on
UDP if you always want to search the complete UDP payload).