Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

mark part of packet as higher level protocol

I think this should be pretty simple but I just cannot find the right words to describe it to Google.

I have a protocol for which I am writing a dissector in Lua. My packets consist of header and payload. I can mark some part of my header as int (eg. payload length) or flags (eg. type of message). As for the payload I would need to mark it as a given protocol that already has dissector in Wireshark (in my example TLS or more specifically Record Protocol format). How do I do that?