Comment # 3
on bug 10154
from Guy Harris
(In reply to travisdarnell from comment #0)
> I would like to see Wireshark be enhanced to allow the creation of a custom
> column where you can display a particular offset. I feel this is an
> extremely powerful function missing from Wireshark when analyzing
> proprietary protocols or payload.
>
> For example, if I wanted a column to show the 5th byte of a udp header:
>
> Custom: udp[4]
>
> Or, if I wanted to show the 5th and 6th bytes of the IP header:
>
> Custom: ip[4:2]
For proprietary protocols, would not developing a (C or Lua) dissector for the
protocol not only make this easier, but also show the protocol data in a form
more helpful than a "protocol data" field that, when clicked on, selects a pile
of hex bytes in the hex dump pane?
You are receiving this mail because:
- You are watching all bug changes.