Is it possible to set the payload protocol for any of the Is there a configuration file I can edit, or perhaps a source file? Update: I've had no luck finding an obvious solution for this, despite the As an example, I would like to have each new user's
Update: It looks like I could generate a
asked 24 Mar '11, 09:09 multipleinte... edited 24 May '11, 12:28 |
One Answer:
You can't manipulate the encaps_uat from your dissector. The best you can do, if you want the association between the LINKTYPE_USER value and the dissector hardwired into a private version of Wireshark, would be to change epan/dissectors/packet-user_encap.c not to register for the particular WTAP_ENCAP_USER value, and have your dissector register for that WTAP_ENCAP_USER value itself. If Wireshark were to support "global" UAT files in addition to per-user UAT files, you could distribute a global UAT file with the entry in question, but, as far as I can tell, it doesn't support them (although it does support a global preferences file). answered 10 Jun '11, 11:11 Guy Harris ♦♦ After several experiments, this is definitely the cleanest way to handle this for now. (26 Aug '11, 09:07) multipleinte... |
What is the "necessity" out of which you use a DLT_USER value? Can you not ask [email protected] for a link-layer type?
We elected to use DLT_USER values in stead of requesting a link-layer type because we use Wireshark to process log files in-house (in a format that is not released to our customers) and using an unassigned value would mean possibly colliding with a new DLT some time in the future.