I would like to write a dissector to capture and parse a particular protocol, and update information on the Wireshark main window display; e.g., Source, Destination, and Info columns, and expand information in the Packet Details pane. How do I present the dissected packet information on the Wireshark GUI? asked 02 Dec '13, 10:03 Tinker |
2 Answers:
You can use the
answered 02 Dec '13, 14:00 multipleinte... |
See, for example, the README.dissector file in the doc directory of the Wireshark source.
Wireshark takes the column values set by your dissector and uses them to set the columns, and takes the protocol tree built by your dissector and displays it in the Packet Details pane. You do not do any GUI work yourself in the dissector; that's all done for you by the Wireshark GUI code. answered 02 Dec '13, 13:52 Guy Harris ♦♦ |
Thanks. This is what I suspected, but had difficulty in confirming it. Much appreciated.