 | 1 | initial version |
As far as I know, post dissectors are used to add information only after the tree (below it). I am not aware of a way of modifying an existing dissector with a post dissector. check these answer for a more detailed explanation: link text
I could see how it could be useful to traverse the tree and add of change tree items. Maybe we should suggest an enhancement request.
for your case, I will suggest to handle it within the dissector itself and not in a separate post dissector. You may want to write/get a LUA dissector of that protocol, replacing the original one, so you can add your extra fields more easily. In such a dissector, you can simply add the field after the VSA and add extra analysis.
Hope I have helped.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
