Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

how to decode part of a message as IPv4 with a custom dissector?

I am just learning to write custom dissectors. I have a packet with a custom header that I had to dissect so that I could create an IP header + IP payload. Is there a way to pass these raw data bytes to have wireshark decode it as a IPv4 protocol and add it to a tree in my custom dissector? I am trying to get it to display in wireshark like this:


[Ethernet header]

[IPv4 header]

[Custom header]

[Created IPv4header]

[Created IPv4payload]