Wireshark · Wireshark-dev: [Wireshark-dev] Reading from and writing back to tvbuff

["Craig Bumpstead" <cbumpste@xxxxxxxxxxxx>]

Hi,

 

Is it ok to read from tvbuff, manipulate the string and write back to it without messing up Wireshark??

 

I would like my proprietary protocol to show relevant information in "Follow TCP Stream". All it shows at the moment is illegible hex. Is it possible to write code for a dissector / interpreter for "Follow TCP Stream"?

 

Regards,

Craig