Is there a way to customize the output of the packet detail pane? What I'd like to do is be able to inspect certain fields of a protocol within a packet for a set of packets (conversation, all IP, all tftp, all from address to address...). I know I can do some drill down manually on a per packet basis but even the control of the format that way is limited. Thanks in advance Roger Hughs [email protected] asked 08 Apr '11, 10:32  hose |
One Answer:
Not exactly sure what you want to do, but I read it like this: you want to be able to take a look at certain decode fields for multiple packets at the same time in the decode pane? If so, I don't think it's possible; Wireshark just decodes the one packet that is selected, not more. What you might do is add the fields you want to inspect as columns using custom column settings - that way you can see the values in the packet list for as many packets as you can cram into your view. answered 08 Apr '11, 13:37  Jasper ♦♦ |
