This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Define additional IPFIX elements

0

I would like wireshark to recognize private enterprise elements sent in an IPFIX record. Is there a way to define the iespec so that wireshark automatically recognizes the data and displays it?

asked 22 May '17, 22:10

hamadaltaf's gravatar image

hamadaltaf
6●1●1●2
accept rate: 0%

There is no support for configuring something to do this at runtime. The existing enterprise elements are added as C code in epan/dissectors/packet-netflow.c.

(24 May '17, 06:22) MartinM

Thanks Martin. Is there a way to get these elements into the code? I mean do you know the process or how to put forward the request for addition?

(24 May '17, 08:24) hamadaltaf

One Answer:

0

See the Wiki page on raising bugs, but mark the Bugzilla item as an "enhancement". Attaching a capture to the item helps immensely.

answered 24 May '17, 09:48

grahamb's gravatar image

grahamb ♦
19.8k●3●30●206
accept rate: 22%