Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

As far as I know, post dissectors are used to add information only after the tree (below it). I am not aware of a way of modifying an existing dissector with a post dissector. check these answer for a more detailed explanation: link text

I could see how it could be useful to traverse the tree and add of change tree items. Maybe we should suggest an enhancement request.

for your case, I will suggest to handle it within the dissector itself and not in a separate post dissector. You may want to write/get a LUA dissector of that protocol, replacing the original one, so you can add your extra fields more easily. In such a dissector, you can simply add the field after the VSA and add extra analysis.

Hope I have helped.