I would like wireshark to recognize private enterprise elements sent in an IPFIX record. Is there a way to define the iespec so that wireshark automatically recognizes the data and displays it? asked 22 May '17, 22:10 hamadaltaf |
One Answer:
See the Wiki page on raising bugs, but mark the Bugzilla item as an "enhancement". Attaching a capture to the item helps immensely. answered 24 May '17, 09:48 grahamb ♦ |
There is no support for configuring something to do this at runtime. The existing enterprise elements are added as C code in epan/dissectors/packet-netflow.c.
Thanks Martin. Is there a way to get these elements into the code? I mean do you know the process or how to put forward the request for addition?