The dissector that I'm working on includes a header that encodes a DAG. The easiest way to read a DAG in human-readable format is in a way where each node (maximum of 9 nodes) is converted to a string and placed on a different line. I am looking to implement in Wireshark something like:
Where the indentation denotes that the three nodes above are in the subtree of "Destination DAG."
Some things I have tried:
The closest that I have come to seeing another dissector that might be able to do this is the TCP options fields. There doesn't appear to be a field name anywhere (no colon), but the content looks static, which is not the case with my dissector.
Is there a way to do this? Thanks in advance for any help!
The problem here is that you can't have a header field without a name and an appended colon before the content.
Yes you can. Have a look at the
answered 12 Jun '12, 09:35