This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

hi..

my company is using custom data packets to send info to access points and other devices. i was wondering is there a way to have only a specific position in the data field byte array that can be displayed as a column (like data[52]), in the table.

alternatively can you create a custom column with labels that would display a string if data[52]==3 and another string in case another data[52]==4 , similar to the coloring rules, only with labels (as it is hard to remember which colors belong to each message)

asked 03 Mar '15, 03:40

emaayan's gravatar image

emaayan
6225
accept rate: 0%


See my answer to a similar questions.

https://ask.wireshark.org/questions/31295/need-part-of-data-only

To sum it up: Wireshark does not offer that functionality by default. You can however write a Post-Dissector (e.g. in Lua) and add your own fields to the frame, which can then be used to show data in a column.

See also here:

https://ask.wireshark.org/questions/26091/how-to-display-s1apgtp_teid-as-decimal-format

Regards
Kurt

permanent link

answered 03 Mar '15, 10:08

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

actually the using color rules and then 'apply as column' on the color is pretty close to what i want, i understand that from 1.9.0 it's considered buggy?

(08 Mar '15, 08:14) emaayan

I think the Lua postdissector code would get you much closer to the desired result than anything of Wiresharks built in functionality.

(09 Mar '15, 13:44) Kurt Knochner ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×122
×32
×29
×6

question asked: 03 Mar '15, 03:40

question was seen: 7,978 times

last updated: 09 Mar '15, 13:44

p​o​w​e​r​e​d by O​S​Q​A