Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

That is not how Wireshark works, Wireshark hands over data to the next dissector, based on tables and heuristics. If there is no data (as is the case with a bare ACK), there is no need to call the next dissector. If you want to display all packets in the TCP stream, don't filter on your protocol name, but filter on tcp.port==12345 or tcp.stream==X (if you want to only view a specific TCP stream containing your protocol.