Wireshark mailing list archives
Re: Dissector - How to add a new row to display next message payload in next row
From: Jeff Morriss <jeff.morriss.ws () gmail com>
Date: Fri, 03 Aug 2012 10:31:51 -0400
Joe Leong wrote:
In the Developer’s Guide, 9.4.2 How to reassemble split TCP Packets mentions “You also cannot assume that a TCP packet contains only one application layer message and that the message header is at the start of your TCP payload. More than one messages can be transmitted in one TCP packet, so that a message can start at an arbitrary position.”. I have this situation andWould there be an example that show how to properly display the COL_INFO for the second TCP payload message as a separate (next) row?
No. All the information goes on the one row. The rows are frame-oriented, not PDU-oriented.
e.g. – Currently, my dissector performs the correction dissection on both messages, but I’m having to display the information for both messages on the same row within the “Info” columnSo it looks likeNo. Time Source Destination Protocol Info 1 232.1 10.1.1.1 10.1.1.2 XXXX DOG CAT
Yep, that looks correct, at least in the current framework. There has been discussion to allow the current frame-oriented framework to somehow allow it to also display per-PDU displays, but nothing has ever been done about it.
Personally I like this idea from many years ago: http://www.wireshark.org/lists/wireshark-dev/200606/msg00147.html ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Dissector - How to add a new row to display next message payload in next row Joe Leong (Aug 03)
- Re: Dissector - How to add a new row to display next message payload in next row Jeff Morriss (Aug 03)