Wireshark-dev: [Wireshark-dev] decode data & display the same
From: NKS <ramrods@xxxxxxxxx>
Date: Mon, 16 Jul 2007 17:51:34 +0530
Sub: how can i hack wireshark to show the actual data(decoded) ?

Please have a look at the following screenshot(wireshark)
hxxp://img512.imageshack.us/img512/1255/data1448bytesyb7.jpg
( same screenshot also available at the following link
hxxp://i11.tinypic.com/4qr3j48.jpg )

I know the structure of the data within the data packet,
instead of displaying the data in hex, I would like wireshark to
display the same data(with readable formatting),
the structure is as follows

typedef struct bestbuysell {
long bestbuyrate; long bestbuyqty;
long bestsellrate; long bestsellqty;
} bestbuysell;

typedef struct marketview {
long scripcode;
long openrate; long closerate;
long highrate; long lowrate;
long nooftrades; long tradedvolume; long tradedvalue;
long ltradeqty; long ltraderate;
long totbuyqty; long totsellqty;
char unit;
char trend;
long lowerctklmt; long upperctklmt;
long weightedavg;

struct bestbuysell brates[5];
} marketview;

typedef struct twsquery {
long msgtype;
long dummy;
long memberid;
long traderid;
long termid;
short noofscrips;
short filler;
long msgtag;
long scripcodes[6];
} twsquery;

typedef struct twsreply {
long msgtype;
short replycode;
short noofrecs;
long msgtag;
marketview mview[6];
} twsreply;

the data packet in the screenshot is the struct twsreply.
how can i hack wireshark to show the actual data(decoded) ?