Is there a way I can alter what the INFO tab displays. I am using a DNP3 protocol and trying to figure out what is going on. There is a custom DNP object that I would like to try to define and display in the "Info" column. I would like to post data from the DNP3 Applicaation Layer (One of the data objects). I would like to take these data objects and display them directly in the info (obviously only if they exist).
asked 17 Jul '15, 16:17
edited 17 Jul '15, 17:24
Guy Harris ♦♦
You'll probably need to modify the dissector to do that, or you might be able to do something with a Lua post-dissector or chained dissector, the difficulty with the lua approaches is getting access to the re-assembled application layer data.
There's no facilities at the moment for defining a custom data type for the dissector.
What's the custom object type you're trying to dissect? Can you post a capture in a public place, e.g. Cloudshark, Google Drive, Dropbox etc.?
answered 17 Jul '15, 16:34