This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Alternate display for Packet List Pane

1

For the situation whereby multiple payload messages are in a single TCP/UDP packet, it would be nice to be able to display the Info for each payload on adjacent rows of the Packet List Pane.

What would be the appropriate API calls to display the Info in any of the following formats within a custom dissector plug-in code?

e.g. – Currently, my dissector performs the correction dissection on both messages, but I’m having to display the information for both messages on the same row within the “Info” column

So it looks like:

No.   Time  Source    Destination  Protocol  Info
1     232.1 10.1.1.1  10.1.1.2     XXXX      DOG CAT

What do I need to do to make the presentation look like:

No.   Time  Source    Destination  Protocol  Info
1     232.1 10.1.1.1  10.1.1.2     XXXX      DOG
                                             CAT

or even:

No.   Time  Source    Destination  Protocol  Info
1     232.1 10.1.1.1  10.1.1.2     XXXX      DOG
1     232.1 10.1.1.1  10.1.1.2     XXXX      CAT

or perhaps:

No.   Time  Source    Destination  Protocol  Info
1     232.1 10.1.1.1  10.1.1.2     XXXX      DOG
2     232.1 10.1.1.1  10.1.1.2     XXXX      CAT

This is along the lines of Wireshark Wishlist item #24.

asked 06 Aug '12, 14:09

joeEmbed's gravatar image

joeEmbed
16223
accept rate: 0%

edited 06 Aug '12, 14:20

helloworld's gravatar image

helloworld
3.1k42041


One Answer:

3

As per the followup message to the one helloworld cited, there are no appropriate API calls for doing that - "All the information goes on the one row. The rows are frame-oriented, not PDU-oriented."

A display of that sort would require enhancements to Wireshark, as per the "along the lines" citing a wishlist item (i.e., an request by somebody who wishes for something to be added to Wireshark) and this mail message, which was a followup to this (ethereal-dev!) mail message.

answered 06 Aug '12, 19:07

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

edited 10 Mar '14, 09:13

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k572