Decode different protobuf messages on same UDP socket pair based on source address

asked 2025-04-24 16:30:23 +0000

I have an application where two devices with fixed IPv4 addresses use the same UDP port on each end to send commands from A to B, and responses from B to A. Command and response are different message types.

I would like to configure Wireshark to decode packets on that UDP port as commands when sent from A, and as responses when sent from B.

At present, I have to go into preferences and switch the order of entries in the Protobuf section to change the decoding. I can see the correct decoding for commands or for responses, but never both at once.

edit retag flag offensive close merge delete

Comments

Lua script (https://wiki.wireshark.org/protobuf#p...) that sets pinfo.private["pb_msg_type"] based on pinfo.src ?

Chuckc gravatar imageChuckc ( 2025-04-24 18:08:01 +0000 )edit