Alternate display for Packet List Pane

Question

For the situation whereby multiple payload messages are in a single TCP/UDP packet, it would be nice to be able to display the Info for each payload on adjacent rows of the Packet List Pane.

What would be the appropriate API calls to display the Info in any of the following formats within a custom dissector plug-in code?

e.g. – Currently, my dissector performs the correction dissection on both messages, but I’m having to display the information for both messages on the same row within the “Info” column

So it looks like:

No.   Time  Source    Destination  Protocol  Info
1     232.1 10.1.1.1  10.1.1.2     XXXX      DOG CAT

What do I need to do to make the presentation look like:

No.   Time  Source    Destination  Protocol  Info
1     232.1 10.1.1.1  10.1.1.2     XXXX      DOG
                                             CAT

or even:

No.   Time  Source    Destination  Protocol  Info
1     232.1 10.1.1.1  10.1.1.2     XXXX      DOG
1     232.1 10.1.1.1  10.1.1.2     XXXX      CAT

or perhaps:

No.   Time  Source    Destination  Protocol  Info
1     232.1 10.1.1.1  10.1.1.2     XXXX      DOG
2     232.1 10.1.1.1  10.1.1.2     XXXX      CAT

This is along the lines of Wireshark Wishlist item #24.

Answer 1

As per the followup message to the one helloworld cited, there are no appropriate API calls for doing that - "All the information goes on the one row. The rows are frame-oriented, not PDU-oriented."

A display of that sort would require enhancements to Wireshark, as per the "along the lines" citing a wishlist item (i.e., an request by somebody who wishes for something to be added to Wireshark) and this mail message, which was a followup to this (ethereal-dev!) mail message.

Alternate display for Packet List Pane

Follow this question

You have a trillion packets.

You need to see four of them.

Don't have Wireshark?

Related questions